Summary
Ein Angreifer kann mehrere Schwachstellen in BigBlueButton ausnutzen, um einen Denial of Service Angriff durchzuführen, und um Informationen offenzulegen.
Product
BigBlueButton ist ein Open-Source-Web-Konferenzsystem.
Vulnerabilities 2
-
High 7.2
BigBlueButton: Exposed ClamAV port enables Denial of Service
BigBlueButton is an open-source virtual classroom. In versions 3.0.21 and below, the official documentation for "Server Customization" on Support for ClamAV as presentation file scanner contains instructions that leave a BBB server vulnerable for Denial of Se…
-
Low 2.0
BigBlueButton: Audio from participants to the server initially unmuted
BigBlueButton is an open-source virtual classroom. In versions 3.0.19 and below, when first joining a session with the microphone muted, the client sends audio to the server regardless of mute state. Media is discarded at the server side, so it isn't audible …
Revision history
-
#1
Initiale Fassung
References
-
bigbluebutton GitHub vom 2026-02-19
https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-6gj9-5rhm-68j8
-
bigbluebutton GitHub vom 2026-02-19
https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-wmhx-qw2p-w6gc