Bigbluebutton vulnerabilities
42 CVEs and advisories name Bigbluebutton as an affected vendor, newest first. Follow it as a feed.
- CVE-2022-41961BigBlueButton subject to Ineffective user bans
- CVE-2022-41960BigBlueButton contains DoS via failed authToken validation
- CVE-2022-31064Cross site scripting in username that will trigger by sending chat
- CVE-2022-31065Cross site scripting vulnerability for private chat in bigbluebutton
- CVE-2022-31039Improper privilege management - Anyone can view room settings in GreenLight
- CVE-2022-29235Limited data exposure for shared external videos in BigBlueButton
- CVE-2022-29236Improper access control for pencil annotations in BigBlueButton
- CVE-2022-29234Grace period for lock settings in public/private chats in BigBlueButton
- CVE-2022-29233Improper access control for breakout rooms in BigBlue Button
- CVE-2022-29232Exposure of messages in BigBlueButton public chats
- CVE-2022-29169ReDoS on endpoint html5client/useragent in BigBlueButton
- CVE-2021-4143Cross-site Scripting (XSS) - Generic in bigbluebutton/bigbluebutton