Known vulnerabilities in BigBlueButton 2.5-alpha-1

Software: BigBlueButton
Version: 2.5-alpha-1
Software CPE: cpe:2.3:a:blindsidenetworks:bigbluebutton:*:*:*:*:*:wordpress:*:*
Total vulnerabilities: 7
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 7.7

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting BigBlueButton version 2.5-alpha-1 BigBlueButton 2.5-alpha-1 is affected by 7 vulnerabilities: 3 medium, 4 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU125909 - Incorrect Permission Assignment for Critical Resource
CVE-2024-39302
CWE-732 Low
No
No
2.7.8 27.06.2024 SB2024062768
#VU125910 - Improper Access Control
CVE-2024-38518
CWE-284 Low
No
No
2.7.8 27.06.2024 SB2024062768
#VU82582 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-42804
CWE-22 Low
No
No
2.6.0 31.10.2023 SB2023103128
#VU82581 - Unrestricted Upload of File with Dangerous Type
CVE-2023-42803
CWE-434 Medium
No
No
2.6.0 31.10.2023 SB2023103128
#VU125908 - Server-Side Request Forgery (SSRF)
CVE-2023-33176
CWE-918 Medium
No
No
2.5.18, 2.6.9 26.06.2023 SB2023062657
#VU131444 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-31064
CWE-79 Medium
No
No
2.4.8, 2.5.0 22.06.2022 SB2022060245
#VU131445 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-31065
CWE-79 Low
No
No
2.4.8, 2.5.0 22.06.2022 SB2022060245