CVE-2020-27601

Publication date

2020-10-21 14:09:49

Family

mitre

State

PUBLISHED

Description

In BigBlueButton before 2.2.7, lockSettingsProps.disablePrivateChat does not apply to already opened chats. This occurs in bigbluebutton-html5/imports/ui/components/chat/service.js.