CVE-2020-27605: Bigbluebutton

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

BigBlueButton through 2.2.28 uses Ghostscript for processing of uploaded EPS documents, and consequently may be subject to attacks related to a "schwache Sandbox."

Affected products

• Bigbluebutton Bigbluebutton: up to and including 2.2.28

Published 2020-10-21. Last modified 2026-06-17.