Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In BigBlueButton before 2.2.28 (or earlier), uploaded presentations are sent to clients without a Content-Type header, which allows XSS, as demonstrated by a .png file extension for an HTML document.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
BigBlueButton 跨站脚本漏洞
Vulnerability Description
BigBlueButton是BigBlueButton社区的一套开源的Web会议系统。 Greenlight BigBlueButton 2.2.28版本及之前版本存在跨站脚本漏洞，该漏洞源于BigBlueButton上传的演示文稿发送给客户端时不带Content-Type头文件，这允许XSS，如HTML文档的.png文件扩展名所示。
CVSS Information
N/A
Vulnerability Type
N/A