CVE-2020-28954

web/controllers/ApiController.groovy in BigBlueButton before 2.2.29 lacks certain parameter sanitization, as demonstrated by accepting control characters in a…

published November 19, 2020

CVSS
—
EPSS
1%
Percentile
69.2
In the wild
Unconfirmed
What it is

web/controllers/ApiController.groovy in BigBlueButton before 2.2.29 lacks certain parameter sanitization, as demonstrated by accepting control characters in a user name.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01250 · 69.2th percentile
Published
2020-11-19T21:14Z
EPSS history
Timeline
  • 19 NOV 21:14Z
    web/controllers/ApiController.groovy in BigBlueButton before 2.2.29 lacks certain parameter sanitization, as demonstrated by accepting control characters in a…
    cvelistv5