S4E just found a medium-severity finding from log file scanner
PlatformPlansPartners
Resources
ToolsBlogDocs
Sign Up →
medium·Product Based Web Vulnerabilities·Updated Jan 3, 2024

CVE-2023-5375 Scanner

CVE-2023-5375 scanner - Open Redirect vulnerability in Mosparo

Est. Time~10 seconds
Scan TypeSingle Scan
Targetsurl
CostFree
2.9k
Times Used
continuous scan runs
5.8k
Continuously Checked
assets under CS
0
Vulnerabilities Found
confirmed findings
References
CVECVE-2023-5375
6.1
CVSSmedium
Exploitable remotely over the internet · no authentication required · user interaction needed.

Open Redirect in GitHub repository mosparo/mosparo prior to 1.0.2.

Attack Vector
Network
Privileges Req.
None
User Interaction
Required
Affected
mosparo/mosparoby mosparo
AFFECTED< 1.0.2SAFE ✓≥ 1.0.2
Updated Aug 22, 2026View on NVD →
Detail

Mosparo/Mosparo is a GitHub repository used for building advanced web crawlers that are designed to work with popular websites and marketplaces, such as Amazon or LinkedIn. Developed by mosparo, this repository aims to aid online businesses with gathering data from different sources. Mosparo/Mosparo provides several libraries and modules for ease of use and convenience. 

Recently, a vulnerability was detected in Mosparo/Mosparo prior to version 1.0.2, with the CVE-2023-5375 vulnerability code. This vulnerability is a type of open redirect that allows an attacker to redirect a user to a malicious website or page using a crafted URL. Open redirects are a widely known vulnerability and are commonly exploited by attackers to steal sensitive information or distribute malware.

When this vulnerability is exploited, attackers can trick users into visiting a fake website or page that appears legitimate. They can then steal sensitive information that users input on the page, such as login credentials or financial information. In addition, attackers can also use the redirection to spread malware or conduct phishing attacks.

Thanks to the pro features of the s4e.io platform, readers of this article can easily and quickly learn about vulnerabilities in their digital assets. s4e.io provides users with comprehensive vulnerability assessment and management solutions that enable businesses to stay ahead of cyber risks and protect their assets from attacks. With these features, businesses can keep their data safe from vulnerabilities like the one found in Mosparo/Mosparo.

 

REFERENCES

 

Solution Advice

To prevent this vulnerability, there are precautions that can be taken to secure Mosparo systems. These include:

  • Keeping your Mosparo software up-to-date with the latest security patches
  • Keeping your web server updated and properly secured
  • Disabling open redirection functionality in the related component
  • Monitoring user activity on your system for suspicious behavior
  • Educating your users on how to recognize and avoid phishing scams.

Get AI-powered remediation steps tailored to your asset.

Try AI Solutions →

Check your infrastructure.
Right now.

11,000+ scanners. Free to start. No credit card required.