782 matches found
PT-2020-13117
Name of the Vulnerable Software and Affected Versions BigBlueButton versions prior to 2.2.6 Description The issue allows remote attackers to read arbitrary files due to a directory traversal vulnerability. This can be leveraged for privilege escalation to access sensitive files, such as...
CVE-2020-12443: Improper Limitation of a Pathname to a Restricted Directory
BigBlueButton before 2.2.6 allows remote attackers to read arbitrary files because the presfilename lowercase value can be a .pdf filename while the presFilename mixed case value has a ../ sequence. This can be leveraged for privilege escalation via a directory traversal to...
BBB-POC
BigBlueButton Vulnerabilities This is a collection...
BigBlueButton Cross-Site Scripting Vulnerability
BigBlueButton is BigBlueButton community of a set of open source Web conferencing system . A cross-site scripting vulnerability exists in BigBlueButton versions prior to 2.2.4. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can...
BigBlueButton Information Disclosure Vulnerability
BigBlueButton is BigBlueButton community of a set of open source Web conferencing system . A security vulnerability exists in BigBlueButton versions prior to 2.2.5. A remote attacker can exploit the vulnerability to obtain sensitive information...
CVE-2020-12112
BigBlueButton before 2.2.5 allows remote attackers to obtain sensitive files via Local File Inclusion...
CVE-2020-12113
BigBlueButton before 2.2.4 allows XSS via closed captions because dangerouslySetInnerHTML in React is used...
CVE-2020-12112
BigBlueButton before 2.2.5 allows remote attackers to obtain sensitive files via Local File Inclusion...
CVE-2020-12113
BigBlueButton before 2.2.4 allows XSS via closed captions because dangerouslySetInnerHTML in React is used...
Design/Logic Flaw
BigBlueButton before 2.2.5 allows remote attackers to obtain sensitive files via Local File Inclusion...
Cross site scripting
BigBlueButton before 2.2.4 allows XSS via closed captions because dangerouslySetInnerHTML in React is used...
CVE-2020-12112
BigBlueButton before 2.2.5 allows remote attackers to obtain sensitive files via Local File Inclusion...
CVE-2020-12112
BigBlueButton before 2.2.5 allows remote attackers to obtain sensitive files via Local File Inclusion...
CVE-2020-12112
BigBlueButton had an LFI/vulnerability in versions before 2.2.5 (CVE-2020-12112). Connected sources also describe a related issue (CVE-2020-12443) where case-insensitive handling of presFilename/presfilename enables directory traversal to bigbluebutton.properties, enabling reading of arbitrary fi...
CVE-2020-12113
BigBlueButton before 2.2.4 allows XSS via closed captions because dangerouslySetInnerHTML in React is used...
CVE-2020-12113
BigBlueButton is affected by CVE-2020-12113: prior to version 2.2.4, the Web UI is vulnerable to cross-site scripting via closed captions because dangerouslySetInnerHTML is used in React. This vulnerability allows XSS as described in multiple sources (e.g., BigBlueButton’s 2.2.4 release notes and...
CVE-2020-12113
BigBlueButton before 2.2.4 allows XSS via closed captions because dangerouslySetInnerHTML in React is used...
PT-2020-13043 · Bigbluebutton · Bigbluebutton
Name of the Vulnerable Software and Affected Versions: BigBlueButton versions prior to 2.2.5 Description: The issue allows remote attackers to obtain sensitive files via Local File Inclusion. Recommendations: For versions prior to 2.2.5, update to version 2.2.5 or later to resolve the issue...
PT-2020-13044
Name of the Vulnerable Software and Affected Versions BigBlueButton versions prior to 2.2.4 Description The issue allows for XSS via closed captions due to the use of dangerouslySetInnerHTML in React. Recommendations For versions prior to 2.2.4, update to version 2.2.4 or later to resolve the iss...
CVE-2020-12112: Improper Limitation of a Pathname to a Restricted Directory
BigBlueButton before 2.2.5 allows remote attackers to obtain sensitive files via Local File Inclusion...