CVE-2022-36028
BigBlueButton Greenlight Open Redirect vulnerability
Summary
BigBlueButton Greenlight Open Redirect vulnerability
Original description
The description as published by the source.
Greenlight is an end-user interface for BigBlueButton servers. Versions prior to 2.13.0 have an open redirect vulnerability in the Login page due to unchecked the value of the return_to cookie. Versions 2.13.0 contains a patch for the issue.
References
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- patch github.com
- web huntr.com