CVE-2020-25820 | BigBlueButton up to 2.2.6 Office Document server-side request forgery (EDB-49070)
A vulnerability was found in BigBlueButton up to 2.2.6. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Office Document Handler. The manipulation leads to server-side request forgery.
This vulnerability is known as CVE-2020-25820. The attack can be launched remotely. Furthermore, there is an exploit available.
It is recommended to upgrade the affected component.