Bbb Playback
Approved changes feed: RSS · Atom
cpe:2.3:a:bigbluebutton:bbb-playback:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Bigbluebutton (67de7263-3aa7-53b7-b8c9-b6d6bd69b5a3) |
|---|---|
| Product | Bbb Playback (181b587f-e9b9-5095-91bc-fb01ee0186b3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-27737 |
vulnerable | 2026-06-08 07:53:22.920692 |
BigBlueButton has Stored XSS in bbb-playback replay
MEDIUM (6.5)
BigBlueButton is an open-source virtual classroom. In versions prior to 3.0.19, the recording playback (presentation format) was not sanitizing user's input in public chat. This allowed for a malicious actor to craft and carry out a targeted XSS attack, activated on anyone replaying the recording. This issue has been fixed 3.0.19.
Published: 2026-05-18T21:11:17.611Z
Updated: 2026-05-19T12:11:53.931Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.