CVE-2020-27603

BigBlueButton before 2.2.27 has an unsafe JODConverter setting in which LibreOffice document conversions can access external files...

CVE-2020-27603

BigBlueButton before 2.2.27 has an unsafe JODConverter setting in which LibreOffice document conversions can access external files...

Improper access control

BigBlueButton before 2.2.27 has an unsafe JODConverter setting in which LibreOffice document conversions can access external files...

CVE-2020-27603

BigBlueButton prior to 2.2.27 is affected by an unsafe JODConverter setting that allows LibreOffice document conversions to access external files. The root cause is the JODConverter configuration used during server-side rendering, enabling potential data exfiltration via LibreOffice processing. T...