Skip to content
OpenAdvisories
Critical · 9.1 CVE-2022-36029 EUVD-2022-38809

BigBlueButton Greenlight Open Redirect vulnerability

Published Apr 25, 2024 · Updated Aug 29, 2024 · Assigned by GitHub_M

Description

Greenlight is an end-user interface for BigBlueButton servers. Versions prior to 2.13.0 have an open redirect vulnerability in the Login page due to unchecked the value of the `return_to` cookie. Versions 2.13.0 contains a patch for the issue.

Affected products

VendorProductAffectedFixed
bigbluebutton greenlight < 2.13.0 2.13.0

References