CVE-2020-26163

BigBlueButton Greenlight before 2.5.6 allows HTTP header (Host and Origin) attacks, which can result in Account Takeover if a victim follows a spoofed…

published September 30, 2020

CVSS
—
EPSS
2%
Percentile
74.6
In the wild
Unconfirmed
What it is

BigBlueButton Greenlight before 2.5.6 allows HTTP header (Host and Origin) attacks, which can result in Account Takeover if a victim follows a spoofed password-reset link.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01531 · 74.6th percentile
Published
2020-09-30T15:28Z
EPSS history
Timeline
  • 30 SEP 15:28Z
    BigBlueButton Greenlight before 2.5.6 allows HTTP header (Host and Origin) attacks, which can result in Account Takeover if a victim follows a spoofed…
    cvelistv5