Bigbluebutton: Security Vulnerabilities
BigBlueButton before 2.2.5 allows remote attackers to obtain sensitive files via Local File Inclusion.
CVSS Score
7.5
EPSS Score
0.091
Published
2020-04-23
BigBlueButton before 2.2.4 allows XSS via closed captions because dangerouslySetInnerHTML in React is used.
CVSS Score
6.1
EPSS Score
0.004
Published
2020-04-23
Page 6