CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

CVE-2024-38273: moodle: BigBlueButton web service leaks meeting joining information to users who should not have access

Description

Insufficient capability checks meant it was possible for users to gain access to BigBlueButton join URLs they did not have permission to access.

Vendor: Moodle

Product: Moodle

EPSS Score: 0.05% (probability of being exploited)

EPSS Percentile: 18.39% (scored less or equal to compared to others)

EPSS Date: 2025-03-14 (when was this score calculated)

2025-02-14 00:32:22 UTC
CVE

moodle: BigBlueButton web service leaks meeting joining information to users who should not have access