← Back to CVE List

CVE-2020-25820

Published: 2020-10-21T13:15Z
Last Modified: 2024-11-21T05:18Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
BigBlueButton before 2.2.7 allows remote authenticated users to read local files and conduct SSRF attacks via an uploaded Office document that has a crafted URL in an ODF xlink field. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt