Cross Site Request Forgery in MooSocial Software by mooSocial
CVE-2023-40868

8.8HIGH

Key Information:

Vendor

Moosocial

Status
Moosocial
Vendor
CVE Published:
14 September 2023

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2023-40868?

A Cross Site Request Forgery vulnerability exists in MooSocial Software that allows attackers to exploit the Delete Account and Deactivate functions. By leveraging this vulnerability, a remote attacker can execute arbitrary code without proper authentication, potentially leading to unauthorized account access and manipulation. Users of the affected MooSocial Demo version are advised to implement appropriate security measures to protect their accounts.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2023-40868
Created by MinoTauro2020

References

https://github.com/MinoTauro2020/CVE-2023-40868

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability Reserved

.