BigBlueButton Information Disclosure Vulnerability (CNVD-2022-82638)

BigBlueButton is an open source Web conferencing system from the BigBlueButton community.BigBlueButton suffers from an information disclosure vulnerability that stems from the lack of information protection measures and access controls for service meeting announcement chat messages.An attacker could use this vulnerability to bypass access controls to obtain public chat messages from different meetings on the server Content.