Description

When duplicating a BigBlueButton activity, the original meeting ID was also duplicated instead of using a new ID for the new activity. This could provide unintended access to the original meeting.

Remediation

References

CVE-2023-5543

Related Vulnerabilities

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-6454)

Oracle JRE CVE-2013-2438 Vulnerability (CVE-2013-2438)

WordPress Plugin Doctor Appointment Booking Multiple Vulnerabilities (1.0.0)

Liferay Portal Incorrect Authorization Vulnerability (CVE-2021-33335)

WordPress Plugin WP Planet Cross-Site Scripting (0.1)

Severity

Low

Classification

CVE-2023-5543 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities