CVE-2023-42804

creationtimestamp| type| source ---|---|--- 2023-10-30 21:19:53+00:00| seen| https://t.me/cibsecurity/73173...

CVE-2023-42804

BigBlueButton CVE-2023-42804 is a path traversal vulnerability affecting versions prior to 2.6.0-beta.1. An attacker with a valid starting folder path could traverse and read files without authentication, limited to certain file extensions (txt, swf, svg, png). The issue arises from insufficient ...