Skip to content
OpenAdvisories

Vendor

bigbluebutton

42 known vulnerabilities.

Products

bigbluebutton 38 greenlight 3 bbb-playback 1 bigbluebutton/bigbluebutton 1
All Critical High Medium Low Exploited only Public exploit

42 results · Feed

  • High 7.5
    CVE-2022-29169

    ReDoS on endpoint html5client/useragent in BigBlueButton

    BigBlueButton is an open source web conferencing system. Versions starting with 2.2 and prior to 2.3.19, 2.4.7, and 2.5.0-beta.2 are vulnerable to regular expression denial of service (ReDoS) attacks. By using specific a RegularExpression, an attacker can cau…

    bigbluebutton bigbluebutton
  • High 8.1
    CVE-2021-4143

    Cross-site Scripting (XSS) - Generic in bigbluebutton/bigbluebutton

    Cross-site Scripting (XSS) - Generic in GitHub repository bigbluebutton/bigbluebutton prior to 2.4.0.

    bigbluebutton bigbluebutton/bigbluebutton