711 matches found
CVE-2020-28954
web/controllers/ApiController.groovy in BigBlueButton before 2.2.29 lacks certain parameter sanitization, as demonstrated by accepting control characters in a user name...
CVE-2020-28953
In BigBlueButton before 2.2.29, a user can vote more than once in a single poll...
CVE-2020-28953
In BigBlueButton before 2.2.29, a user can vote more than once in a single poll...
CVE-2020-28954
web/controllers/ApiController.groovy in BigBlueButton before 2.2.29 lacks certain parameter sanitization, as demonstrated by accepting control characters in a user name...
Code injection
In BigBlueButton before 2.2.29, a user can vote more than once in a single poll...
CVE-2020-28953
In BigBlueButton before 2.2.29, a user can vote more than once in a single poll, enabling poll manipulation. The available description does not specify the underlying root cause, exact component/file, or affected versions beyond the 2.2.29 threshold. No remediation details are provided in the doc...
CVE-2020-28953
In BigBlueButton before 2.2.29, a user can vote more than once in a single poll...
CVE-2020-28954
BigBlueButton is affected by CVE-2020-28954 due to inadequate parameter sanitization in web/controllers/ApiController.groovy, allowing control characters to be accepted in a user name. This affects versions prior to 2.2.29. The vulnerability is described across multiple sources (NVD/Red Hat/CNVD)...
CVE-2020-28954
web/controllers/ApiController.groovy in BigBlueButton before 2.2.29 lacks certain parameter sanitization, as demonstrated by accepting control characters in a user name...
BigBlueButton 安全漏洞
BigBlueButton is an open source Web conferencing system from the BigBlueButton community. versions prior to BigBlueButton 2.2.29 have a security vulnerability that could be exploited by an attacker to cast multiple votes in a single poll...
CVE-2020-28954: Improper Encoding or Escaping of Output
web/controllers/ApiController.groovy in BigBlueButton before 2.2.29 lacks certain parameter sanitization, as demonstrated by accepting control characters in a user name...
BigBlueButton 安全漏洞
BigBlueButton is an open source Web conferencing system from the BigBlueButton community. security vulnerabilities exist in versions prior to BigBlueButton 2.2.29, the source of the vulnerability lacks cleanup for certain parameters, as evidenced by the control characters in the accepted username...
CVE-2020-28953: Undefined Security Weakness
In BigBlueButton before 2.2.29, a user can vote more than once in a single poll...
BigBlueButton 2.2.25 - Arbitrary File Disclosure and Server-Side Request Forgery
Exploit Title: BigBlueButton 2.2.25 - Arbitrary File Disclosure and Server-Side Request Forgery Date: 2020-09-11 Exploit Author: RedTeam Pentesting GmbH Vendor Homepage: https://bigbluebutton.org/ Version: BigBlueButton 2.2.25 RedTeam Pentesting discovered a vulnerability in the BigBlueButton web...
Exploit for CVE-2020-27603
CVE-2020-27603-bbb-libreoffice-poc Proof of Concept of Libreof...
BigBlueButton Greenlight has an unspecified vulnerability
BigBlueButton is an open source Web conferencing system from the BigBlueButton community. versions prior to BigBlueButton Greenlight 2.5.6 have a security vulnerability that stems from an allow HTTP header host and source attack, which can be exploited by an attacker to cause an account takeover...
BigBlueButton Greenlight Cross-Site Scripting Vulnerability
BigBlueButton is BigBlueButton community of a set of open source Web conferencing system . A cross-site scripting vulnerability exists in BigBlueButton Greenlight version 2.7.6, which stems from a cross-site scripting XSS vulnerability in the "merge account" function of admin .js. No details of t...
BigBlueButton Server-Side Request Forgery Vulnerability
BigBlueButton is BigBlueButton community of a set of open source Web conferencing system . A server-side request forgery vulnerability exists in versions prior to BigBlueButton 2.2.7 that allows an attacker to read a local file and perform an SSRF attack via an uploaded Office document with a...