CVE-2020-27612

—

CVSS 3.1

4.3 medium

EPSS

<1%p50

Published

Oct 21, 2020 (Oct 21, 2020)

Modified

Jun 17, 2026

Description

Greenlight in BigBlueButton through 2.2.28 places usernames in room URLs, which may represent an unintended information leak to users in a room, or an information leak to outsiders if any user publishes a screenshot of a browser window.

Vendors: bigbluebutton
Products: bigbluebutton
Weakness: CWE-200
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.