CVE-2024-39302

CVE-2024-39302 affects BigBlueButton via overly elevated file permissions in the directory /usr/local/bigbluebutton/core/vendor/bundle/ruby/2.7.0/gems/resque-2.6.0, enabling potential privilege escalation and exposure of server information. Patched in versions 2.6.18, 2.7.8, and 3.0.0-alpha.7. No...