BigBlueButton 2.7.0 Alpha 3
Approved changes feed: RSS · Atom
cpe:2.3:a:bigbluebutton:bigbluebutton:2.7.0:alpha3:*:*:*:*:*:*
part: a version: 2.7.0 update: alpha3
| Vendor | Bigbluebutton (67de7263-3aa7-53b7-b8c9-b6d6bd69b5a3) |
|---|---|
| Product | Bigbluebutton (a9054be0-06c4-5a84-8fa2-7200407c65ba) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/bigbluebutton/bigbluebutton |
purl2cpe | 2026-06-01 10:18:08.207077 |
pkg:sourceforge/bigbluebutton |
purl2cpe | 2026-06-01 10:18:08.207079 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-43798 |
vulnerable | 2026-06-08 06:12:38.041706 |
BigBlueButton Blind SSRF When Uploading Presentation (mitigation bypass)
MEDIUM (5.6)
BigBlueButton is an open-source virtual classroom. BigBlueButton prior to versions 2.6.12 and 2.7.0-rc.1 is vulnerable to Server-Side Request Forgery (SSRF). This issue is a bypass of CVE-2023-33176. A patch in versions 2.6.12 and 2.7.0-rc.1 disabled follow redirect at `httpclient.execute` since the software no longer has to follow it when using `finalUrl`. There are no known workarounds. We recommend upgrading to a patched version of BigBlueButton.
Published: 2023-10-30T22:24:59.109Z
Updated: 2024-09-05T20:19:17.331Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-43797 |
vulnerable | 2026-06-08 06:12:38.039236 |
BigBlueButton Stored Cross-site Scripting vulnerability at Guest Lobby
MEDIUM (6.3)
BigBlueButton is an open-source virtual classroom. Prior to versions 2.6.11 and 2.7.0-beta.3, Guest Lobby was vulnerable to cross-site scripting when users wait to enter the meeting due to inserting unsanitized messages to the element using unsafe innerHTML. Text sanitizing was added for lobby messages starting in versions 2.6.11 and 2.7.0-beta.3. There are no known workarounds.
Published: 2023-10-30T22:18:11.821Z
Updated: 2024-09-05T20:20:01.467Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.