Boletines de Vulnerabilidades

MSA-25-0035: Missing authorisation checks in BigBlueButton view page

   
Software afectado PHP
 
par Michael Hawkins. Insufficient authorisation checks could result in users being able to view BigBlueButton recordings they did not have permission to access.Severity/Risk:SeriousVersions affected:5.0, 4.5 to 4.5.4, 4.4 to 4.4.8, 4.1 to 4.1.18 and earlier unsupported versionsVersions fixed:5.0.1, 4.5.5, 4.4.9 and 4.1.19Reported by:Vincent SchneiderCVE identifier:CVE-2025-49517Changes (main):http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-84706Tracker

More info:

https://moodle.org/mod/forum/discuss.php?d=468506&parent=1880837