CVE-2020-25820: SSRF
First published: Wed Oct 21 2020(Updated: )
BigBlueButton before 2.2.7 allows remote authenticated users to read local files and conduct SSRF attacks via an uploaded Office document that has a crafted URL in an ODF xlink field.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Bigbluebutton Bigbluebutton | <2.2.27 |
Remedy
https://github.com/bigbluebutton/bigbluebutton/commit/71fe1eac1e5bd73a2cd44bd79c001086b250e435
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://packetstormsecurity.com/files/159667/BigBlueButton-2.2.25-File-Disclosure-Server-Side-Request-Forgery.html
- https://github.com/bigbluebutton/bigbluebutton/commit/71fe1eac1e5bd73a2cd44bd79c001086b250e435
- https://github.com/bigbluebutton/bigbluebutton/compare/v2.2.26...v2.2.27
- https://www.golem.de/news/big-blue-button-das-grosse-blaue-sicherheitsrisiko-2010-151610.html
- https://www.redteam-pentesting.de/advisories/rt-sa-2020-005
Frequently Asked Questions
What is the CVE ID of this vulnerability?
The CVE ID of this vulnerability is CVE-2020-25820.
What is the severity of CVE-2020-25820?
The severity of CVE-2020-25820 is medium with a CVSS score of 6.5.
What is the affected software version?
BigBlueButton versions up to and excluding 2.2.27 are affected.
How can remote authenticated users exploit this vulnerability?
Remote authenticated users can exploit this vulnerability by uploading an Office document with a crafted URL in an ODF xlink field, allowing them to read local files and conduct SSRF attacks.
Are there any available patches or fixes for this vulnerability?
Yes, BigBlueButton version 2.2.27 includes a fix for CVE-2020-25820. It is recommended to update to this version or a higher one.
- collector/nvd-index
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/description
- agent/type
- agent/event
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- agent/tags
- agent/remedy
- collector/mitre-cve
- source/MITRE
- vendor/bigbluebutton
- canonical/bigbluebutton bigbluebutton