CVE-2020-27612: Bigbluebutton

Medium severity, CVSS 4.3. EPSS: 0.7% chance of exploitation in the next 30 days.

Greenlight in BigBlueButton through 2.2.28 places usernames in room URLs, which may represent an unintended information leak to users in a room, or an information leak to outsiders if any user publishes a screenshot of a browser window.

Affected products

• Bigbluebutton Bigbluebutton: up to and including 2.2.28

Published 2020-10-21. Last modified 2026-06-17.