| Package | Affected versions | Patched versions |
|---|---|---|
| bigbluebutton | ≤ 2.2.29 |
An issue was discovered in BigBlueButton through 2.2.29. When at attacker is able to view an account_activations/edit?token= URI, the attacker can create an approved user account associated with an email address that has an arbitrary domain name.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free