| Package | Affected versions | Patched versions |
|---|---|---|
| bigbluebutton | < 2.2.27 | 2.2.27 |
BigBlueButton before 2.2.7 allows remote authenticated users to read local files and conduct SSRF attacks via an uploaded Office document that has a crafted URL in an ODF xlink field.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free