CVE-2020-27601

2020-10-2114:09:49

mitre

www.cve.org

3.9 Low

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.5%

JSON

In BigBlueButton before 2.2.7, lockSettingsProps.disablePrivateChat does not apply to already opened chats. This occurs in bigbluebutton-html5/imports/ui/components/chat/service.js.

References

github.com/bigbluebutton/bigbluebutton/commit/7dcdfb191373684bafa7b11cdd0128c9869040a1

github.com/bigbluebutton/bigbluebutton/compare/v2.2.6...v2.2.7