Description

When duplicating a BigBlueButton activity, the original meeting ID was also duplicated instead of using a new ID for the new activity. This could provide unintended access to the original meeting.

Remediation

References

CVE-2023-5543

Related Vulnerabilities

MySQL CVE-2016-8284 Vulnerability (CVE-2016-8284)

ReviveAdserver Improper Access Control Vulnerability (CVE-2015-7369)

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2016-4542)

WordPress Plugin ZoomSounds-WordPress Wave Audio Player with Playlist Arbitrary File Upload (2.0)

Moodle Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2025-3641)

Severity

Low

Classification

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities CVE-2023-5543