Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Greenlight in BigBlueButton through 2.2.28 places usernames in room URLs, which may represent an unintended information leak to users in a room, or an information leak to outsiders if any user publishes a screenshot of a browser window.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
BigBlueButton 信息泄露漏洞
Vulnerability Description
BigBlueButton是BigBlueButton社区的一套开源的Web会议系统。 Greenlight BigBlueButton 2.2.28版本及之前版本存在安全漏洞,该漏洞源于将用户名放置在房间url中,这可能意味着房间内的用户无意中泄露了信息,或者如果用户发布了浏览器窗口的截图,则意味着信息泄露给了外部人员。
CVSS Information
N/A
Vulnerability Type
N/A