In BigBlueButton before 2.2.6,... CVE-2020-27608
-
AV
AC
AU
C
I
A
发布：
2025-07-26
修订：
2025-07-26
In BigBlueButton before 2.2.6, uploaded presentations are sent to clients without a Content-Type header, which allows XSS, as demonstrated by a .png file extension for an HTML document.
漏洞利用/PoC
暂无可用Exp或PoC
受影响的平台与产品
当前有0条受影响产品信息
