CVE-2020-12113

BigBlueButton before 2.2.4 allows XSS via closed captions because dangerouslySetInnerHTML in React is used

published April 23, 2020

CVSS
—
EPSS
1%
Percentile
60.8
In the wild
Unconfirmed
What it is

BigBlueButton before 2.2.4 allows XSS via closed captions because dangerouslySetInnerHTML in React is used.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00947 · 60.8th percentile
Published
2020-04-23T17:53Z
EPSS history
Timeline
  • 23 APR 17:53Z
    BigBlueButton before 2.2.4 allows XSS via closed captions because dangerouslySetInnerHTML in React is used
    cvelistv5