CVE-2020-12112: Bigbluebutton

High severity, CVSS 7.5. EPSS: 5.3% chance of exploitation in the next 30 days.

BigBlueButton before 2.2.5 allows remote attackers to obtain sensitive files via Local File Inclusion.

Affected products

• Bigbluebutton Bigbluebutton: before 2.2.5 (fixed in 2.2.5)

Published 2020-04-23. Last modified 2026-06-17.