medium6.1
CVE-2020-12113
BigBlueButton before 2.2.4 allows XSS via closed captions because dangerouslySetInnerHTML in React is used.
Impact
BigBlueButton before 2.2.4 allows XSS via closed captions because dangerouslySetInnerHTML in React is used.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bigbluebutton | Bigbluebutton | before 2.2.4 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/bigbluebutton/bigbluebutton/pull/9017
- https://github.com/bigbluebutton/bigbluebutton/releases/tag/v2.2.4
- https://www.sakshamanand.com/cve-2020-12113/
- https://github.com/bigbluebutton/bigbluebutton/pull/9017
- https://github.com/bigbluebutton/bigbluebutton/releases/tag/v2.2.4
- https://www.sakshamanand.com/cve-2020-12113/