hannob/CVE-2020-27603-bbb-libreoffice-poc

PoC

Proof of Concept of Libreoffice file exfiltration vulnerability in Big Blue Button

view exploit source poc_in_githubauthor hannobpublished 2020-11-10catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2020-27603US	high7.5	2.93% (87th)	Exploit	2020-10-21
BigBlueButton before 2.2.27 has an unsafe JODConverter setting in which LibreOffice document conversions can access external files.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.