CVE-2020-27601 Information

Description

In BigBlueButton before 2.2.7 lockSettingsProps.disablePrivateChat does not apply to already opened chats. This occurs in bigbluebutton-html5/imports/ui/components/chat/service.js.

Reference

https://github.com/bigbluebutton/bigbluebutton/commit/7dcdfb191373684bafa7b11cdd0128c9869040a1 https://github.com/bigbluebutton/bigbluebutton/compare/v2.2.6…v2.2.7