CVE-2022-29232

Name of the Vulnerable Software and Affected Versions BigBlueButton versions 2.2 through 2.3.8 BigBlueButton versions 2.4-beta before 2.4-beta-1

Description BigBlueButton is an open source web conferencing system. An attacker can circumvent access controls to obtain the content of public chat messages from different meetings on the server, provided they are a participant in a meeting on the server.

Recommendations For BigBlueButton versions 2.2 through 2.3.8, update to version 2.3.9 to resolve the issue. For BigBlueButton versions 2.4-beta before 2.4-beta-1, update to version 2.4-beta-1 to resolve the issue.