CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

RedhatCVE•added 2025/05/22 3:54 p.m.•17 views

CVE-2020-27608

In BigBlueButton before 2.2.28 or earlier, uploaded presentations are sent to clients without a Content-Type header, which allows XSS, as demonstrated by a .png file extension for an HTML document...

6.1CVSS6.7AI score0.00819EPSS

SaveExploits1

Cvelist•added 2020/10/21 2:07 p.m.•41 views

CVE-2020-27608

In BigBlueButton before 2.2.28 or earlier, uploaded presentations are sent to clients without a Content-Type header, which allows XSS, as demonstrated by a .png file extension for an HTML document...

6.2AI score0.00819EPSS

SaveExploits1References1

Rapid7 Vulnerability Database (full)•added 2020/10/21 12:00 a.m.•2 views

CVE-2020-27608: Improper Neutralization of Input During Web Page Generation

In BigBlueButton before 2.2.28 or earlier, uploaded presentations are sent to clients without a Content-Type header, which allows XSS, as demonstrated by a .png file extension for an HTML document...

6.1CVSS5.8AI score0.00819EPSS

SaveExploits1References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by