Skip to content
CVE PROGRAM SOURCE RECORD3.3 Low

CVE-2023-5543

Moodle: duplicating a bigbluebutton activity assigns the same meeting id

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
fedora

Description

When duplicating a BigBlueButton activity, the original meeting ID was also duplicated instead of using a new ID for the new activity. This could provide unintended access to the original meeting.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

moodle

Default version status: unaffected

  • 4.2.0 to < 4.2.3affected
  • 4.1.0 to < 4.1.6affected
  • 4.0.0 to < 4.0.11affected

References