CyberRota Analysis
AI analysis pending.
CVE
CVE-2020-27608
Severity
MEDIUM
CVSS
6.1
EPSS
0.82%
Original NVD Description
In BigBlueButton before 2.2.28 (or earlier), uploaded presentations are sent to clients without a Content-Type header, which allows XSS, as demonstrated by a .png file extension for an HTML document.