{"action":"closed","issue":{"url":"https://api.github.com/repos/bigbluebutton/bigbluebutton/issues/2913","labels_url":"https://api.github.com/repos/bigbluebutton/bigbluebutton/issues/2913/labels{/name}","comments_url":"https://api.github.com/repos/bigbluebutton/bigbluebutton/issues/2913/comments","events_url":"https://api.github.com/repos/bigbluebutton/bigbluebutton/issues/2913/events","html_url":"https://github.com/bigbluebutton/bigbluebutton/issues/2913","id":119019148,"number":2913,"title":"Security Issues","user":{"login":"vicencarlos","id":754434,"avatar_url":"https://avatars.githubusercontent.com/u/754434?v=3","gravatar_id":"","url":"https://api.github.com/users/vicencarlos","html_url":"https://github.com/vicencarlos","followers_url":"https://api.github.com/users/vicencarlos/followers","following_url":"https://api.github.com/users/vicencarlos/following{/other_user}","gists_url":"https://api.github.com/users/vicencarlos/gists{/gist_id}","starred_url":"https://api.github.com/users/vicencarlos/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/vicencarlos/subscriptions","organizations_url":"https://api.github.com/users/vicencarlos/orgs","repos_url":"https://api.github.com/users/vicencarlos/repos","events_url":"https://api.github.com/users/vicencarlos/events{/privacy}","received_events_url":"https://api.github.com/users/vicencarlos/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/bigbluebutton/bigbluebutton/labels/Security","name":"Security","color":"ededed"}],"state":"closed","locked":false,"assignee":{"login":"ffdixon","id":290351,"avatar_url":"https://avatars.githubusercontent.com/u/290351?v=3","gravatar_id":"","url":"https://api.github.com/users/ffdixon","html_url":"https://github.com/ffdixon","followers_url":"https://api.github.com/users/ffdixon/followers","following_url":"https://api.github.com/users/ffdixon/following{/other_user}","gists_url":"https://api.github.com/users/ffdixon/gists{/gist_id}","starred_url":"https://api.github.com/users/ffdixon/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ffdixon/subscriptions","organizations_url":"https://api.github.com/users/ffdixon/orgs","repos_url":"https://api.github.com/users/ffdixon/repos","events_url":"https://api.github.com/users/ffdixon/events{/privacy}","received_events_url":"https://api.github.com/users/ffdixon/received_events","type":"User","site_admin":false},"milestone":null,"comments":1,"created_at":"2015-11-26T10:52:01Z","updated_at":"2015-12-10T20:57:12Z","closed_at":"2015-12-10T20:57:12Z","body":"We found a high potential security issue in the life demo version. It's possible to inject javascript in the parameter meetingID\r\n\r\n\r\n![xss](https://cloud.githubusercontent.com/assets/754434/11421280/0d3ad4e8-9434-11e5-81be-9364f360e2a6.png)\r\n"}}