Medium WID-SEC-2023-1568 1 CVE

BigBlueButton: Schwachstelle ermöglicht Manipulation von Daten

Published Jun 26, 2023 · Updated Jun 26, 2023 · de-DE

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in BigBlueButton ausnutzen, um Daten zu manipulieren.

Product

BigBlueButton ist ein Open-Source-Web-Konferenzsystem.

Vulnerabilities 1

Medium 4.8

CVE-2023-33176

Blind SSRF When Uploading Presentation in BigBlueButton

BigBlueButton is an open source virtual classroom designed to help teachers teach and learners learn. In affected versions are affected by a Server-Side Request Forgery (SSRF) vulnerability. In an `insertDocument` API request the user is able to supply a URL …

bigbluebutton bigbluebutton

Jun 26, 2023

Revision history

2023-06-26 #1
Initiale Fassung

References

Github Bigbluebutton Security Notification vom 2023-06-26
https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-3q22-hph2-cff7