Patchwire CVEs, their patch status, and feeds to follow them

CVE-2024-38273

Fixed upstream EPSS <1%CVSS 5.4

Insufficient capability checks meant it was possible for users to gain access to BigBlueButton join URLs they did not have permission to access.

Published 2024-06-18 · CVE record · OSV

Products: Moodle

Fixed upstream

EcosystemPackageFixed in
Packagistmoodle/moodle4.4.1
Packagistmoodle/moodle4.3.5
Packagistmoodle/moodle4.2.8
Packagistmoodle/moodle4.1.11

Distro releases

ReleasePackageFixed in
Ubuntu Pro 16.04 LTSmoodleno fix
Ubuntu Pro 18.04 LTSmoodleno fix