File and Path Handling

Every one of the 4 is a mark on the map. Named now: 1 to 4, most at risk first.

1. BigBlueButton before 2.2.5 allows remote attackers to obtain sensitive files via Local File Inclusion.CVE-2020-12112Bigbluebutton · 5.3% likely

   CWE-22

2. BigBlueButton before 2.2.6 allows remote attackers to read arbitrary files because the presfilename (lowercase) value can be a .pdf filename while the presFilename (mixed case) va…CVE-2020-12443Bigbluebutton · 3.7% likely

   CWE-22

3. BigBlueButton Unrestricted File Upload vulnerabilityCVE-2023-42803bigbluebutton · CVSS 5.3 · 0.7% likely

   CWE-434

4. BigBlueButton Path Traversal – Reading Certain File ExtensionsCVE-2023-42804bigbluebutton · CVSS 3.1 · 0.6% likely

   CWE-22

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.