PT-2021-11201 · Blackboard · Blackboard Collaborate Ultra

Published 2021-03-02 · Updated 2024-08-04 · CVE-2020-25902

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: Blackboard Collaborate Ultra version 20.02

Description: The issue concerns a cross-site scripting (XSS) vulnerability. This vulnerability allows the execution of an XSS payload in the classroom, potentially leading to the theft of cookies from users who join the class. Third-party sources dispute the validity of this entry, suggesting it might be a false positive.

Recommendations: For Blackboard Collaborate Ultra version 20.02, consider disabling the execution of scripts in the classroom as a temporary workaround until the issue is resolved. Restrict access to sensitive user data to minimize the risk of exploitation. Avoid using the platform for sensitive activities until the vulnerability is addressed. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2020-25902

Affected Products

Blackboard Collaborate Ultra

References · 8

• 🔥❌ https://github.com/Lawyer-1/Turki/blob/main/CVE-2020-25902.md · Exploit, Deleted
• https://nvd.nist.gov/vuln/detail/CVE-2020-25902 · Security Note
• https://blackboard.com/teaching-learning/collaboration-web-conferencing/blackboard-collaborate · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-25902 · Vendor Advisory
• https://t.me/cvenotify/10721 · Telegram Post
• https://t.me/cvenotify/10707 · Telegram Post
• https://t.me/cvenotify/89031 · Telegram Post
• https://t.me/cibsecurity/24337 · Telegram Post