Unscored CVE-2020-27601 EUVD-2020-20108GHSA-gwrj-9v3p-9982

In BigBlueButton before 2.2.7, lockSettingsProps.disablePrivateChat does not apply to already opened chats. This occurs in bigbluebutton-ht…

Published Oct 21, 2020 · Updated Aug 4, 2024 · Assigned by mitre

Description

In BigBlueButton before 2.2.7, lockSettingsProps.disablePrivateChat does not apply to already opened chats. This occurs in bigbluebutton-html5/imports/ui/components/chat/service.js.

References

https://github.com/bigbluebutton/bigbluebutton/compare/v2.2.6...v2.2.7
https://github.com/bigbluebutton/bigbluebutton/commit/7dcdfb191373684bafa7b11cdd0128c9869040a1