BigBlueButton 安全漏洞

漏洞信息详情

BigBlueButton是BigBlueButton社区的一套开源的Web会议系统。

BigBlueButton 2.2.29之前版本存在安全漏洞，该漏洞源缺少某些参数的清理，从接受用户名中的控制字符可以看出。

目前厂商已发布升级补丁以修复漏洞，补丁获取链接：

https://github.com/bigbluebutton/bigbluebutton/commit/5c911ddeec4493f40f42e2f137800ed4692004a4

来源:MISC

链接:https://github.com/bigbluebutton/bigbluebutton/commit/5c911ddeec4493f40f42e2f137800ed4692004a4

来源:MISC

链接:https://github.com/bigbluebutton/bigbluebutton/commit/e59bcd0c33a6a3203c011faa8823ba2cac1e4f37

来源:MISC

链接:https://github.com/bigbluebutton/bigbluebutton/issues/10818

来源:MISC

链接:https://github.com/bigbluebutton/bigbluebutton/compare/v2.2.28...v2.2.29

来源:nvd.nist.gov

链接:https://nvd.nist.gov/vuln/detail/CVE-2020-28954

暂无