Skip to content
OpenAdvisories
Critical · 9.1 CVE-2022-36028 EUVD-2022-38808

BigBlueButton Greenlight Open Redirect vulnerability

Published Apr 25, 2024 · Updated Aug 3, 2024 · Assigned by GitHub_M

Description

Greenlight is an end-user interface for BigBlueButton servers. Versions prior to 2.13.0 have an open redirect vulnerability in the Login page due to unchecked the value of the `return_to` cookie. Versions 2.13.0 contains a patch for the issue.

Affected products

VendorProductAffectedFixed
bigbluebutton greenlight < 2.13.0 2.13.0

References