Description

When duplicating a BigBlueButton activity, the original meeting ID was also duplicated instead of using a new ID for the new activity. This could provide unintended access to the original meeting.

Remediation

References

CVE-2023-5543

Related Vulnerabilities

WordPress Plugin Variation Swatches for WooCommerce Cross-Site Scripting (2.1.1)

WordPress Plugin Backup, Restore and Migrate WordPress Sites With the XCloner Directory Traversal (3.1.4)

WordPress Plugin Gallery-Photo Albums-Portfolio Multiple Cross-Site Request Forgery Vulnerabilities (1.2.59)

MySQL CVE-2019-2957 Vulnerability (CVE-2019-2957)

WordPress Plugin AdSense Manager Cross-Site Scripting (4.0.3)

Severity

Low

Classification

CVE-2023-5543 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities