What’s Vulnerable › Vulnerabilities

CVE-2020-27611

• Severity: high (CVSS 7.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-10-21 · updated 2026-06-17
• Weakness: CWE-327

Description

BigBlueButton through 2.2.28 uses STUN/TURN resources from a third party, which may represent an unintended endpoint.

Affected products

• bigbluebutton: through 2.2.28

References

• https://docs.bigbluebutton.org/admin/privacy.html
• https://github.com/bigbluebutton/bigbluebutton/commit/d0bc77c3dbd858295004f15d7a57ec35e6b203d6
• https://docs.bigbluebutton.org/admin/privacy.html
• https://github.com/bigbluebutton/bigbluebutton/commit/d0bc77c3dbd858295004f15d7a57ec35e6b203d6

Get alerted when CVE-2020-27611 or the next vulnerability affects your stack