CVE-2020-29043

An issue was discovered in BigBlueButton through 2.2.29. When at attacker is able to view an accountactivations/edit?token= URI, the attacker can create an approved user account associated with an email address that has an arbitrary domain name...

PT-2020-17085

Name of the Vulnerable Software and Affected Versions BigBlueButton versions through 2.2.29 Description An issue was discovered in BigBlueButton where an attacker can create an approved user account associated with an email address that has an arbitrary domain name when able to view an "account...