Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-aubk-tpgh-z7e2
Vulnerability ID VCID-aubk-tpgh-z7e2
Aliases CVE-2023-5543
Summary Improper Authorization When duplicating a BigBlueButton activity, the original meeting ID was also duplicated instead of using a new ID for the new activity. This could provide unintended access to the original meeting.
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (2)
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.00088 https://api.first.org/data/v1/epss?cve=CVE-2023-5543
Reference id Reference type URL
http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-77795
https://api.first.org/data/v1/epss?cve=CVE-2023-5543
https://bugzilla.redhat.com/show_bug.cgi?id=2243442
https://moodle.org/mod/forum/discuss.php?d=451584
CVE-2023-5543 https://nvd.nist.gov/vuln/detail/CVE-2023-5543
No exploits are available.
There are no known vectors.
Exploit Prediction Scoring System (EPSS)
Percentile 0.251
EPSS Score 0.00088
Published At May 30, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-05-30T21:02:29.080657+00:00 GitLab Importer Import https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/moodle/moodle/CVE-2023-5543.yml 38.6.0