high7.5
CVE-2020-12112
BigBlueButton before 2.2.5 allows remote attackers to obtain sensitive files via Local File Inclusion.
Impact
BigBlueButton before 2.2.5 allows remote attackers to obtain sensitive files via Local File Inclusion.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bigbluebutton | Bigbluebutton | before 2.2.5 |
Weakness classification
References
- NVD record
- CVE.org record
- https://cwe.mitre.org/data/definitions/23.html
- https://github.com/bigbluebutton/bigbluebutton/compare/v2.2.4...v2.2.5
- https://github.com/tchenu/CVE-2020-12112
- https://twitter.com/bigbluebutton/status/1252706369486180353
- https://twitter.com/thibeault_chenu/status/1249976515917422593
- https://cwe.mitre.org/data/definitions/23.html
- https://github.com/bigbluebutton/bigbluebutton/compare/v2.2.4...v2.2.5
- https://github.com/tchenu/CVE-2020-12112
- https://twitter.com/bigbluebutton/status/1252706369486180353
- https://twitter.com/thibeault_chenu/status/1249976515917422593