Bigbluebutton: >> Bigbluebutton >> 2.2.28 Security Vulnerabilities
BigBlueButton through 2.2.28 records a video meeting despite the deactivation of video recording in the user interface. This may result in data storage beyond what is authorized for a specific meeting topic or participant.
CVSS Score
5.3
EPSS Score
0.002
Published
2020-10-21
BigBlueButton through 2.2.28 uses STUN/TURN resources from a third party, which may represent an unintended endpoint.
CVSS Score
7.3
EPSS Score
0.001
Published
2020-10-21
Greenlight in BigBlueButton through 2.2.28 places usernames in room URLs, which may represent an unintended information leak to users in a room, or an information leak to outsiders if any user publishes a screenshot of a browser window.
CVSS Score
4.3
EPSS Score
0.002
Published
2020-10-21
Page 4