web/controllers/ApiController.groovy in BigBlueButton before 2.2.29 lacks certain parameter sanitization, as demonstrated by accepting control characters in a user name...
5.3CVSS6.9AI score0.0125EPSS
SaveExploits0
Prion•added 2020/11/19 10:15 p.m.•18 views
Code injection
web/controllers/ApiController.groovy in BigBlueButton before 2.2.29 lacks certain parameter sanitization, as demonstrated by accepting control characters in a user name...