{"vulnerability": "CVE-2023-43323", "sightings": [{"uuid": "ceac00c6-b2af-4e2f-93aa-66cbc445be36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-43323", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/9098", "content": "#exploit\n1. CVE-2023-35793:\nCSRF On Web-SSH\nhttps://github.com/Dodge-MPTC/CVE-2023-35793-CSRF-On-Web-SSH\n\n2. CVE-2023-43263:\nXSS vulnerability in Froala Editor v.4.1.1\nhttps://github.com/b0marek/CVE-2023-43263\n\n3. CVE-2023-43323:\nmooSocial - External HTTP/DNS Service Interaction\nhttps://github.com/ahrixia/CVE-2023-43323", "creation_timestamp": "2023-09-27T11:00:44.000000Z"}, {"uuid": "3cd097eb-389b-4064-9972-b0fdd2570aca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-43323", "type": "seen", "source": "https://t.me/cibsecurity/71232", "content": "\u203c CVE-2023-43323 \u203c\n\nmooSocial 3.1.8 is vulnerable to external service interaction on post function. When executed, the server sends a HTTP and DNS request to external server. The Parameters effected are multiple - messageText, data[wall_photo], data[userShareVideo] and data[userShareLink].\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-29T00:36:57.000000Z"}, {"uuid": "c3d4277f-262b-4493-8891-623894350814", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-43323", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/1131", "content": "#exploit\n1. CVE-2023-35793:\nCSRF On Web-SSH\nhttps://github.com/Dodge-MPTC/CVE-2023-35793-CSRF-On-Web-SSH\n\n2. CVE-2023-43263:\nXSS vulnerability in Froala Editor v.4.1.1\nhttps://github.com/b0marek/CVE-2023-43263\n\n3. CVE-2023-43323:\nmooSocial - External HTTP/DNS Service Interaction\nhttps://github.com/ahrixia/CVE-2023-43323", "creation_timestamp": "2024-08-16T08:28:28.000000Z"}]}