CVE-2022-36028
BigBlueButton Greenlight Open Redirect vulnerability
概要
BigBlueButton Greenlight Open Redirect vulnerability
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Greenlight is an end-user interface for BigBlueButton servers. Versions prior to 2.13.0 have an open redirect vulnerability in the Login page due to unchecked the value of the return_to cookie. Versions 2.13.0 contains a patch for the issue.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- patch github.com
- web huntr.com