CVE-2023-42803 BigBlueButton Unrestricted File Upload vulnerability

BigBlueButton is an open-source virtual classroom. BigBlueButton prior to version 2.6.0-beta.2 is vulnerable to unrestricted file upload, where the insertDocument API call does not validate the given file extension before saving the file, and does not remove it in case of validation failures...

BigBlueButton Cross-Site Scripting Vulnerability

BigBlueButton is an open source web conferencing system from the BigBlueButton community. A cross-site scripting vulnerability exists in BigBlueButton versions prior to 2.6.11, and prior to 2.7.0-beta.3, which stems from a cross-site scripting XSS vulnerability in Guest Lobby...

BigBlueButton Code Issue Vulnerability

BigBlueButton is an open source web conferencing system from the BigBlueButton community. BigBlueButton has a code issue vulnerability that stems from vulnerability to server-side request forgery SSRF attacks...

PT-2023-28589 · Unknown · Bigbluebutton

Name of the Vulnerable Software and Affected Versions: BigBlueButton versions prior to 2.6.0-beta.2 Description: BigBlueButton is an open-source virtual classroom. The issue arises from the insertDocument API call not validating the given file extension before saving the file and not removing it ...

BigBlueButton Path Traversal Vulnerability

BigBlueButton is an open source Web conferencing system from the BigBlueButton community. A path traversal vulnerability exists in BigBlueButton versions prior to 2.6.0, which stems from the presence of a path traversal vulnerability. An unauthenticated attacker can exploit this vulnerability to...

BigBlueButton Code Issue Vulnerability

BigBlueButton is an open source Web conferencing system from the BigBlueButton community. A code issue vulnerability exists in BigBlueButton versions prior to 2.6.0 that stems from a file upload vulnerability in the insertDocument API...

PT-2023-28990 · Unknown · Bigbluebutton

Name of the Vulnerable Software and Affected Versions: BigBlueButton versions prior to 2.6.12 BigBlueButton versions prior to 2.7.0-rc.1 Description: The issue is related to Server-Side Request Forgery SSRF, which is a bypass of a previously known problem. A patch was applied to disable follow...

BigBlueButton <= 3.0.0-beta.4 - Reflected XSS

Description The plugin does not sanitise and escape the username and tempentrypass parameters before outputting them back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2023-39991

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Blindside Networks BigBlueButton plugin = 3.0.0-beta.4 versions...

CVE-2023-39991

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Blindside Networks BigBlueButton plugin = 3.0.0-beta.4 versions...

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Blindside Networks BigBlueButton plugin = 3.0.0-beta.4 versions...

CVE-2023-39991 WordPress BigBlueButton Plugin <= 3.0.0-beta.4 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Blindside Networks BigBlueButton plugin = 3.0.0-beta.4 versions...

CVE-2023-39991

CVE-2023-39991 : Affects WordPress plugin Blindside Networks BigBlueButton, version

CVE-2023-39991 WordPress BigBlueButton Plugin <= 3.0.0-beta.4 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Blindside Networks BigBlueButton plugin = 3.0.0-beta.4 versions...

PT-2023-27197 · Blindside Networks · Bigbluebutton

Name of the Vulnerable Software and Affected Versions: Blindside Networks BigBlueButton plugin versions = 3.0.0-beta.4 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowi...

WordPress plugin bigbluebutton cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

WordPress BigBlueButton Plugin <= 3.0.0-beta.4 is vulnerable to Cross Site Scripting (XSS)

Software BigBlueButton Type Plugin Vulnerable versions = 3.0.0-beta.4 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-7296 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 61598d599dba Credits Marco Wotschka Requir...

WordPress BigBlueButton Plugin <= 3.0.0-beta.4 is vulnerable to Cross Site Scripting (XSS)

Software BigBlueButton Type Plugin Vulnerable versions = 3.0.0-beta.4 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-39991 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 69a8f386dd1f Credits Ivy TOOR, LISA...

CVE-2023-33176

BigBlueButton is an open source virtual classroom designed to help teachers teach and learners learn. In affected versions are affected by a Server-Side Request Forgery SSRF vulnerability. In an insertDocument API request the user is able to supply a URL from which the presentation should be...

Server side request forgery (ssrf)

BigBlueButton is an open source virtual classroom designed to help teachers teach and learners learn. In affected versions are affected by a Server-Side Request Forgery SSRF vulnerability. In an insertDocument API request the user is able to supply a URL from which the presentation should be...