BI
Product
bigbluebutton
61
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 16Medium 36Low 6
Watch
Add bigbluebutton to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-27605 | 9.8 | Oct 21 | BigBlueButton through 2.2.28 uses Ghostscript for processing of uploaded EPS documents, and consequently may be subject to attacks related to a "schwache Sandbox." Affected: through 2.2.28 |
| CVE-2020-27602 | 9.8 | Oct 21 | BigBlueButton before 2.2.7 does not have a protection mechanism for separator injection in meetingId, userId, and authToken Affected: before 2.2.7 |
| CVE-2020-12443 | 9.8 | Apr 29 | BigBlueButton before 2.2.6 allows remote attackers to read arbitrary files because the presfilename (lowercase) value can be a .pdf filename while the presFilename (mixed case)… Affected: before 2.2.6 |
Showing 3