CVE-2022-29233: Improper Authorization

BigBlueButton is an open source web conferencing system. In BigBlueButton starting with 2.2 but before 2.3.18 and 2.4-rc-1, an attacker can circumvent access controls to gain access to all breakout rooms of the meeting they are in. The permission checks rely on knowledge of internal ids rather th...

BigBlueButton 授权问题漏洞

BigBlueButton is an open source Web conferencing system from the BigBlueButton community. bigBlueButton has an authorization issue vulnerability that can be exploited by attackers to send messages to locked chats within a 5s grace period after lockdown settings take effect...

CVE-2022-29235: Exposure of Sensitive Information to an Unauthorized Actor

BigBlueButton is an open source web conferencing system. Starting in version 2.2 and prior to versions 2.3.18 and 2.4-rc-6, an attacker who is able to obtain the meeting identifier for a meeting on a server can find information related to an external video being shared, like the current timestamp...

PT-2022-19427 · Unknown +1 · Bigbluebutton +1

Name of the Vulnerable Software and Affected Versions: BigBlueButton versions prior to 2.3.19 BigBlueButton versions prior to 2.4.7 BigBlueButton versions prior to 2.5.0-beta.2 Description: The issue allows for regular expression denial of service ReDoS attacks. An attacker can cause denial of...

PT-2022-19485 · Unknown · Bigbluebutton

Name of the Vulnerable Software and Affected Versions: BigBlueButton versions 2.2 through 2.3.17 BigBlueButton versions 2.4-rc-1 through 2.4-rc-5 Description: BigBlueButton is an open source web conferencing system. An attacker who is able to obtain the meeting identifier for a meeting on a serve...

BigBlueButton 信息泄露漏洞

BigBlueButton is an open source Web conferencing system from the BigBlueButton community.BigBlueButton suffers from an information disclosure vulnerability that stems from the lack of information protection measures and access controls for service meeting announcement chat messages.An attacker...

CVE-2022-29234: Improper Authorization

BigBlueButton is an open source web conferencing system. Starting in version 2.2 and prior to versions 2.3.18 and 2.4.1, an attacker could send messages to a locked chat within a grace period of 5s any lock setting in the meeting was changed. The attacker needs to be a participant in the meeting...

BigBlueButton 授权问题漏洞

BigBlueButton is an open source Web conferencing system from the BigBlueButton community.BigBlueButton suffers from an authorization issue vulnerability that can be exploited by attackers to bypass access controls to access all breakout rooms of the conference they are in...

CVE-2022-29232: Exposure of Sensitive Information to an Unauthorized Actor

BigBlueButton is an open source web conferencing system. Starting with version 2.2 and prior to versions 2.3.9 and 2.4-beta-1, an attacker can circumvent access controls to obtain the content of public chat messages from different meetings on the server. The attacker must be a participant in a...

PT-2022-19486 · Unknown · Bigbluebutton

Name of the Vulnerable Software and Affected Versions: BigBlueButton versions 2.2 through 2.3.17 BigBlueButton versions 2.4-rc-1 through 2.4-rc-5 Description: BigBlueButton is an open source web conferencing system. An attacker can circumvent access restrictions for drawing on the whiteboard. The...

CVE-2022-29169: Improper Input Validation

BigBlueButton is an open source web conferencing system. Versions starting with 2.2 and prior to 2.3.19, 2.4.7, and 2.5.0-beta.2 are vulnerable to regular expression denial of service ReDoS attacks. By using specific a RegularExpression, an attacker can cause denial of service for the bbb-html5...

CVE-2022-29236: Improper Authorization

BigBlueButton is an open source web conferencing system. Starting in version 2.2 and prior to versions 2.3.18 and 2.4-rc-6, an attacker can circumvent access restrictions for drawing on the whiteboard. The permission check is inadvertently skipped on the server, due to a previously introduced gra...

BigBlueButton 授权问题漏洞

BigBlueButton is an open source Web conferencing system from the BigBlueButton community. bigBlueButton has an authorization issue vulnerability that stems from the application's lack of required permission checks, which could be exploited by an attacker to bypass access restrictions in order to...

BigBlueButton 安全漏洞

BigBlueButton is an open source Web conferencing system from the BigBlueButton community.BigBlueButton is vulnerable to an information disclosure vulnerability that could be exploited by an attacker to find information related to an external video being shared...

BigBlueButton 输入验证错误漏洞

BigBlueButton is an open source web conferencing system from the BigBlueButton community.BigBlueButton suffers from a denial-of-service vulnerability. An attacker could use the vulnerability to cause a denial of service to the bbb-html5 service...

CVE-2021-4143

Cross-site Scripting XSS - Generic in GitHub repository bigbluebutton/bigbluebutton prior to 2.4.0...

CVE-2021-4143

Cross-site Scripting XSS - Generic in GitHub repository bigbluebutton/bigbluebutton prior to 2.4.0...

Cross site scripting

Cross-site Scripting XSS - Generic in GitHub repository bigbluebutton/bigbluebutton prior to 2.4.0...

CVE-2021-4143 Cross-site Scripting (XSS) - Generic in bigbluebutton/bigbluebutton

Cross-site Scripting XSS - Generic in GitHub repository bigbluebutton/bigbluebutton prior to 2.4.0...

CVE-2021-4143

CVE-2021-4143 affects the open‑source web conferencing platform BigBlueButton prior to 2.4.0. The vulnerability is a generic Cross-site Scripting (XSS) due to lack of proper validation of client‑side data by the web application, enabling injection of arbitrary JavaScript in other users’ browsers ...