CVE-2023-42803

BigBlueButton (open-source virtual classroom) prior to version 2.6.0-beta.2 is vulnerable to unrestricted file upload via the insertDocument API, which does not validate the file extension before saving and does not remove the file on validation failures. The issue is addressed in version 2.6.0-b...

CVE-2023-42803 BigBlueButton Unrestricted File Upload vulnerability

BigBlueButton is an open-source virtual classroom. BigBlueButton prior to version 2.6.0-beta.2 is vulnerable to unrestricted file upload, where the insertDocument API call does not validate the given file extension before saving the file, and does not remove it in case of validation failures...