Search for vulnerabilities
Vulnerability details: VCID-7hrp-v3v6-nfh9
Vulnerability ID VCID-7hrp-v3v6-nfh9
Aliases CVE-2023-5543
Summary When duplicating a BigBlueButton activity, the original meeting ID was also duplicated instead of using a new ID for the new activity. This could provide unintended access to the original meeting.
Status Published
Exploitability 0.5
Weighted Severity 3.0
Risk 1.5
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-284 Improper Access Control
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
cvssv3.1 3.3 http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-77795
ssvc Track http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-77795
epss 0.00088 https://api.first.org/data/v1/epss?cve=CVE-2023-5543
epss 0.00088 https://api.first.org/data/v1/epss?cve=CVE-2023-5543
cvssv3.1 3.3 https://bugzilla.redhat.com/show_bug.cgi?id=2243442
ssvc Track https://bugzilla.redhat.com/show_bug.cgi?id=2243442
cvssv3.1 3.3 https://moodle.org/mod/forum/discuss.php?d=451584
ssvc Track https://moodle.org/mod/forum/discuss.php?d=451584
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2023-5543
CVE-2023-5543 https://nvd.nist.gov/vuln/detail/CVE-2023-5543
discuss.php?d=451584 https://moodle.org/mod/forum/discuss.php?d=451584
gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-77795 http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-77795
show_bug.cgi?id=2243442 https://bugzilla.redhat.com/show_bug.cgi?id=2243442
No exploits are available.
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N Found at http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-77795
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-16T21:03:37Z/ Found at http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-77795
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N Found at https://bugzilla.redhat.com/show_bug.cgi?id=2243442
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-16T21:03:37Z/ Found at https://bugzilla.redhat.com/show_bug.cgi?id=2243442
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N Found at https://moodle.org/mod/forum/discuss.php?d=451584
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-16T21:03:37Z/ Found at https://moodle.org/mod/forum/discuss.php?d=451584
Exploit Prediction Scoring System (EPSS)
Percentile 0.26217
EPSS Score 0.00088
Published At June 30, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-01T14:32:11.732757+00:00 EPSS Importer Import https://epss.cyentia.com/epss_scores-current.csv.gz 36.1.3