CVE-2023-5543 (published 2023-11-09T21:35:38.116Z)
When duplicating a BigBlueButton activity, the original meeting ID was also duplicated instead of using a new ID for the new activity. This could provide unintended access to the original meeting.
Affected products: Vendor: n/a
Product: moodle
Versions: 4.2.3, 4.1.6, 4.0.11