Vulnerabilities > CVE-2023-42803 - Unspecified vulnerability in Bigbluebutton

CVSS 8.8 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

bigbluebutton

NVD

Published: 2023-10-30

Updated: 2024-11-21

Summary

BigBlueButton is an open-source virtual classroom. BigBlueButton prior to version 2.6.0-beta.2 is vulnerable to unrestricted file upload, where the insertDocument API call does not validate the given file extension before saving the file, and does not remove it in case of validation failures. BigBlueButton 2.6.0-beta.2 contains a patch. There are no known workarounds.

Vulnerable Configurations

Part	Description	Count
Application	Bigbluebutton Bigbluebutton Bigbluebutton 2.6.0 Bigbluebutton Bigbluebutton - Bigbluebutton Bigbluebutton 0.7 Bigbluebutton Bigbluebutton 0.8 Bigbluebutton Bigbluebutton 0.9.0 Bigbluebutton Bigbluebutton 0.9.1 Bigbluebutton Bigbluebutton 0.9.2 Bigbluebutton Bigbluebutton 0.71 Bigbluebutton Bigbluebutton 0.81 Bigbluebutton Bigbluebutton 1.0.0 Bigbluebutton Bigbluebutton 1.1.0 Bigbluebutton Bigbluebutton 2.0 Bigbluebutton Bigbluebutton 2.2.0 Bigbluebutton Bigbluebutton 2.2.1 Bigbluebutton Bigbluebutton 2.2.2 Bigbluebutton Bigbluebutton 2.2.3 Bigbluebutton Bigbluebutton 2.2.4 Bigbluebutton Bigbluebutton 2.2.5 Bigbluebutton Bigbluebutton 2.2.6 Bigbluebutton Bigbluebutton 2.2.7 Bigbluebutton Bigbluebutton 2.2.8 Bigbluebutton Bigbluebutton 2.2.9 Bigbluebutton Bigbluebutton 2.2.10 Bigbluebutton Bigbluebutton 2.2.11 Bigbluebutton Bigbluebutton 2.2.12 Bigbluebutton Bigbluebutton 2.2.14 Bigbluebutton Bigbluebutton 2.2.15 Bigbluebutton Bigbluebutton 2.2.16 Bigbluebutton Bigbluebutton 2.2.17 Bigbluebutton Bigbluebutton 2.2.18 Bigbluebutton Bigbluebutton 2.2.19 Bigbluebutton Bigbluebutton 2.2.20 Bigbluebutton Bigbluebutton 2.2.21 Bigbluebutton Bigbluebutton 2.2.22 Bigbluebutton Bigbluebutton 2.2.23 Bigbluebutton Bigbluebutton 2.2.24 Bigbluebutton Bigbluebutton 2.2.25 Bigbluebutton Bigbluebutton 2.2.26 Bigbluebutton Bigbluebutton 2.2.27 Bigbluebutton Bigbluebutton 2.2.28 Bigbluebutton Bigbluebutton 2.2.29 Bigbluebutton Bigbluebutton 2.2.30 Bigbluebutton Bigbluebutton 2.2.31 Bigbluebutton Bigbluebutton 2.3 Bigbluebutton Bigbluebutton 2.3.0 Bigbluebutton Bigbluebutton 2.3.1 Bigbluebutton Bigbluebutton 2.3.2 Bigbluebutton Bigbluebutton 2.3.3 Bigbluebutton Bigbluebutton 2.3.4 Bigbluebutton Bigbluebutton 2.3.5 Bigbluebutton Bigbluebutton 2.3.6 Bigbluebutton Bigbluebutton 2.3.7 Bigbluebutton Bigbluebutton 2.3.8 Bigbluebutton Bigbluebutton 2.3.9 Bigbluebutton Bigbluebutton 2.3.10 Bigbluebutton Bigbluebutton 2.3.11 Bigbluebutton Bigbluebutton 2.3.12 Bigbluebutton Bigbluebutton 2.3.13 Bigbluebutton Bigbluebutton 2.3.14 Bigbluebutton Bigbluebutton 2.3.15 Bigbluebutton Bigbluebutton 2.3.16 Bigbluebutton Bigbluebutton 2.3.17 Bigbluebutton Bigbluebutton 2.4 Bigbluebutton Bigbluebutton 2.4.0 Bigbluebutton Bigbluebutton 2.4.1 Bigbluebutton Bigbluebutton 2.4.2 Bigbluebutton Bigbluebutton 2.4.3 Bigbluebutton Bigbluebutton 2.4.4 Bigbluebutton Bigbluebutton 2.4.5 Bigbluebutton Bigbluebutton 2.4.6 Bigbluebutton Bigbluebutton 2.4.7 Bigbluebutton Bigbluebutton 2.4.9 Bigbluebutton Bigbluebutton 2.5 Bigbluebutton Bigbluebutton 2.5.1 Bigbluebutton Bigbluebutton 2.5.2 Bigbluebutton Bigbluebutton 2.5.3 Bigbluebutton Bigbluebutton 2.5.4 Bigbluebutton Bigbluebutton 2.5.5 Bigbluebutton Bigbluebutton 2.5.6 Bigbluebutton Bigbluebutton 2.5.7 Bigbluebutton Bigbluebutton 2.5.8 Bigbluebutton Bigbluebutton 2.5.9 Bigbluebutton Bigbluebutton 2.5.10 Bigbluebutton Bigbluebutton 2.5.11 Bigbluebutton Bigbluebutton 2.5.12 Bigbluebutton Bigbluebutton 2.5.14 Bigbluebutton Bigbluebutton 2.5.15 Bigbluebutton Bigbluebutton 2.5.16 Bigbluebutton Bigbluebutton 2.5.17 Bigbluebutton Bigbluebutton 2.5.18	170

Summary

Vulnerable Configurations

References