592 matches found
Design/Logic Flaw
BigBlueButton is an open source web conferencing system. Versions starting with 2.2 and prior to 2.3.19, 2.4.7, and 2.5.0-beta.2 are vulnerable to regular expression denial of service ReDoS attacks. By using specific a RegularExpression, an attacker can cause denial of service for the bbb-html5...
CVE-2022-29232 Exposure of messages in BigBlueButton public chats
BigBlueButton is an open source web conferencing system. Starting with version 2.2 and prior to versions 2.3.9 and 2.4-beta-1, an attacker can circumvent access controls to obtain the content of public chat messages from different meetings on the server. The attacker must be a participant in a...
CVE-2022-29232 Exposure of messages in BigBlueButton public chats
BigBlueButton is an open source web conferencing system. Starting with version 2.2 and prior to versions 2.3.9 and 2.4-beta-1, an attacker can circumvent access controls to obtain the content of public chat messages from different meetings on the server. The attacker must be a participant in a...
CVE-2022-29232
CVE-2022-29232 affects BigBlueButton: versions prior to 2.3.9 and 2.4-beta-1 disclose public chat messages across meetings to participants in a server where access controls are bypassed. The root cause is improper access control for meeting chat content. Patches are available in 2.3.9 and 2.4-bet...
CVE-2022-29232 Exposure of messages in BigBlueButton public chats
BigBlueButton is an open source web conferencing system. Starting with version 2.2 and prior to versions 2.3.9 and 2.4-beta-1, an attacker can circumvent access controls to obtain the content of public chat messages from different meetings on the server. The attacker must be a participant in a...
CVE-2022-29169 ReDoS on endpoint html5client/useragent in BigBlueButton
BigBlueButton is an open source web conferencing system. Versions starting with 2.2 and prior to 2.3.19, 2.4.7, and 2.5.0-beta.2 are vulnerable to regular expression denial of service ReDoS attacks. By using specific a RegularExpression, an attacker can cause denial of service for the bbb-html5...
CVE-2022-29169 ReDoS on endpoint html5client/useragent in BigBlueButton
BigBlueButton is an open source web conferencing system. Versions starting with 2.2 and prior to 2.3.19, 2.4.7, and 2.5.0-beta.2 are vulnerable to regular expression denial of service ReDoS attacks. By using specific a RegularExpression, an attacker can cause denial of service for the bbb-html5...
CVE-2022-29169
BigBlueButton is vulnerable to a ReDoS in the bbb-html5 service due to the useragent lookup path. Affected software: BigBlueButton versions starting with 2.2 and before 2.3.19, 2.4.7, and 2.5.0-beta.2. Root cause: the useragent.lookup() function uses regex-based input handling in html5client/user...
CVE-2022-29169 ReDoS on endpoint html5client/useragent in BigBlueButton
BigBlueButton is an open source web conferencing system. Versions starting with 2.2 and prior to 2.3.19, 2.4.7, and 2.5.0-beta.2 are vulnerable to regular expression denial of service ReDoS attacks. By using specific a RegularExpression, an attacker can cause denial of service for the bbb-html5...
PT-2022-19427 · Unknown +1 · Bigbluebutton +1
Name of the Vulnerable Software and Affected Versions: BigBlueButton versions prior to 2.3.19 BigBlueButton versions prior to 2.4.7 BigBlueButton versions prior to 2.5.0-beta.2 Description: The issue allows for regular expression denial of service ReDoS attacks. An attacker can cause denial of...
BigBlueButton 授权问题漏洞
BigBlueButton is an open source Web conferencing system from the BigBlueButton community. bigBlueButton has an authorization issue vulnerability that can be exploited by attackers to send messages to locked chats within a 5s grace period after lockdown settings take effect...
PT-2022-19485 · Unknown · Bigbluebutton
Name of the Vulnerable Software and Affected Versions: BigBlueButton versions 2.2 through 2.3.17 BigBlueButton versions 2.4-rc-1 through 2.4-rc-5 Description: BigBlueButton is an open source web conferencing system. An attacker who is able to obtain the meeting identifier for a meeting on a serve...
PT-2022-19486 · Unknown · Bigbluebutton
Name of the Vulnerable Software and Affected Versions: BigBlueButton versions 2.2 through 2.3.17 BigBlueButton versions 2.4-rc-1 through 2.4-rc-5 Description: BigBlueButton is an open source web conferencing system. An attacker can circumvent access restrictions for drawing on the whiteboard. The...
BigBlueButton 授权问题漏洞
BigBlueButton is an open source Web conferencing system from the BigBlueButton community.BigBlueButton suffers from an authorization issue vulnerability that can be exploited by attackers to bypass access controls to access all breakout rooms of the conference they are in...
BigBlueButton 信息泄露漏洞
BigBlueButton is an open source Web conferencing system from the BigBlueButton community.BigBlueButton suffers from an information disclosure vulnerability that stems from the lack of information protection measures and access controls for service meeting announcement chat messages.An attacker...
BigBlueButton 安全漏洞
BigBlueButton is an open source Web conferencing system from the BigBlueButton community.BigBlueButton is vulnerable to an information disclosure vulnerability that could be exploited by an attacker to find information related to an external video being shared...
BigBlueButton 输入验证错误漏洞
BigBlueButton is an open source web conferencing system from the BigBlueButton community.BigBlueButton suffers from a denial-of-service vulnerability. An attacker could use the vulnerability to cause a denial of service to the bbb-html5 service...
BigBlueButton 授权问题漏洞
BigBlueButton is an open source Web conferencing system from the BigBlueButton community. bigBlueButton has an authorization issue vulnerability that stems from the application's lack of required permission checks, which could be exploited by an attacker to bypass access restrictions in order to...
