CVE-2023-5543: Fedoraproject Extra Packages For Enterprise Linux

Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days.

When duplicating a BigBlueButton activity, the original meeting ID was also duplicated instead of using a new ID for the new activity. This could provide unintended access to the original meeting.

Affected products

• Fedoraproject Extra Packages For Enterprise Linux: version 7.0 only
• Fedoraproject Fedora: version 38 only
• Moodle Moodle: from 4.0.0, before 4.0.11 (fixed in 4.0.11); from 4.1.0, before 4.1.6 (fixed in 4.1.6); from 4.2.0, before 4.2.3 (fixed in 4.2.3)

Published 2023-11-09. Last modified 2026-06-17.