Skip to contentBigbluebutton vulnerabilities
Newest
- bigbluebutton greenlightA cross-site scripting (XSS) vulnerability exists in the 'merge account' functionality in admins...CVE-2020-276426.1 Medium
- bigbluebuttonIn BigBlueButton before 2.2.7, lockSettingsProps.disablePrivateChat does not apply to already...CVE-2020-276013.5 Low
- bigbluebuttonBigBlueButton before 2.2.27 has an unsafe JODConverter setting in which LibreOffice document...CVE-2020-27603Public exploit7.5 High
- bigbluebuttonBigBlueButton before 2.3 does not implement LibreOffice sandboxing. This might make it easier for...CVE-2020-276046.5 Medium
- bigbluebuttonBigBlueButton through 2.2.28 uses Ghostscript for processing of uploaded EPS documents, and...CVE-2020-276059.8 Critical
- bigbluebuttonIn BigBlueButton before 2.2.28 (or earlier), the client-side Mute button only signifies that the...CVE-2020-276076.5 Medium
- bigbluebuttonBigBlueButton through 2.2.28 records a video meeting despite the deactivation of video recording...CVE-2020-276095.3 Medium
- bigbluebuttonBigBlueButton through 2.2.28 uses STUN/TURN resources from a third party, which may represent an...CVE-2020-276117.3 High
- bigbluebuttonThe installation procedure in BigBlueButton before 2.2.28 (or earlier) uses ClueCon as the...CVE-2020-276138.4 High
- bigbluebuttonGreenlight in BigBlueButton through 2.2.28 places usernames in room URLs, which may represent an...CVE-2020-276124.3 Medium
- bigbluebuttonThe installation procedure in BigBlueButton before 2.2.28 (or earlier) exposes certain network...CVE-2020-276107.5 High
- bigbluebuttonIn BigBlueButton before 2.2.28 (or earlier), uploaded presentations are sent to clients without a...CVE-2020-276086.1 Medium
- bigbluebuttonBigBlueButton before 2.2.28 (or earlier) does not set the secure flag for the session cookie in...CVE-2020-276065.3 Medium
- bigbluebuttonBigBlueButton before 2.2.7 does not have a protection mechanism for separator injection in...CVE-2020-276029.8 Critical
- bigbluebuttonBigBlueButton before 2.2.7 allows remote authenticated users to read local files and conduct SSRF...CVE-2020-25820Public exploitEPSS 10.5%6.5 Medium
- bigbluebutton greenlightBigBlueButton Greenlight before 2.5.6 allows HTTP header (Host and Origin) attacks, which can...CVE-2020-261638.8 High
- bigbluebuttonBigBlueButton before 2.2.6 allows remote attackers to read arbitrary files because the...CVE-2020-124439.8 Critical
- bigbluebuttonBigBlueButton before 2.2.5 allows remote attackers to obtain sensitive files via Local File...CVE-2020-12112Public exploit7.5 High
- bigbluebuttonBigBlueButton before 2.2.4 allows XSS via closed captions because dangerouslySetInnerHTML in...CVE-2020-121136.1 Medium