CVEDB API

BigBlueButton before 2.2.4 allows XSS via closed captions because dangerouslySetInnerHTML in React is used.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 60.6%

CVSS Severity

CVSS v3 Score 6.1

CVSS v2 Score 4.3

References

Products affected by CVE-2020-12113

Bigbluebutton » Bigbluebutton » Version: N/A

cpe:2.3:a:bigbluebutton:bigbluebutton:-
Bigbluebutton » Bigbluebutton » Version: 0.7

cpe:2.3:a:bigbluebutton:bigbluebutton:0.7
Bigbluebutton » Bigbluebutton » Version: 0.71

cpe:2.3:a:bigbluebutton:bigbluebutton:0.71
Bigbluebutton » Bigbluebutton » Version: 0.8

cpe:2.3:a:bigbluebutton:bigbluebutton:0.8
Bigbluebutton » Bigbluebutton » Version: 0.81

cpe:2.3:a:bigbluebutton:bigbluebutton:0.81
Bigbluebutton » Bigbluebutton » Version: 0.9.0

cpe:2.3:a:bigbluebutton:bigbluebutton:0.9.0
Bigbluebutton » Bigbluebutton » Version: 0.9.1

cpe:2.3:a:bigbluebutton:bigbluebutton:0.9.1
Bigbluebutton » Bigbluebutton » Version: 0.9.2

cpe:2.3:a:bigbluebutton:bigbluebutton:0.9.2
Bigbluebutton » Bigbluebutton » Version: 1.0.0

cpe:2.3:a:bigbluebutton:bigbluebutton:1.0.0
Bigbluebutton » Bigbluebutton » Version: 1.1.0

cpe:2.3:a:bigbluebutton:bigbluebutton:1.1.0
Bigbluebutton » Bigbluebutton » Version: 2.0

cpe:2.3:a:bigbluebutton:bigbluebutton:2.0
Bigbluebutton » Bigbluebutton » Version: 2.2.0

cpe:2.3:a:bigbluebutton:bigbluebutton:2.2.0
Bigbluebutton » Bigbluebutton » Version: 2.2.1

cpe:2.3:a:bigbluebutton:bigbluebutton:2.2.1
Bigbluebutton » Bigbluebutton » Version: 2.2.2

cpe:2.3:a:bigbluebutton:bigbluebutton:2.2.2
Bigbluebutton » Bigbluebutton » Version: 2.2.3

cpe:2.3:a:bigbluebutton:bigbluebutton:2.2.3