CVE-2020-25820

MEDIUM

BigBlueButton < 2.2.27 - Authenticated Server-Side Request Forgery via ODF xlink Field

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2020-25820. PoCs published by RedTeam Pentesting GmbH.

AI-analyzed exploit summary This exploit leverages an arbitrary file disclosure and SSRF vulnerability in BigBlueButton by embedding XLinks in ODF documents, allowing attackers to read local files or perform server-side requests during document conversion.

Description

BigBlueButton before 2.2.7 allows remote authenticated users to read local files and conduct SSRF attacks via an uploaded Office document that has a crafted URL in an ODF xlink field.

Exploits (1)

exploitdb WORKING POC

by RedTeam Pentesting GmbH · textwebappsmultiple

https://www.exploit-db.com/exploits/49070

View Code ZIP pw:eip

This exploit leverages an arbitrary file disclosure and SSRF vulnerability in BigBlueButton by embedding XLinks in ODF documents, allowing attackers to read local files or perform server-side requests during document conversion.

Classification

Working Poc 100%

Attack Type

Ssrf | Info Leak

Complexity

Moderate

Reliability

Reliable

Target: BigBlueButton 2.2.25

Auth required

Prerequisites: Access to a conference with presentation upload permissions · Ability to upload ODF documents

MITRE ATT&CK