CVE-2022-36028
BigBlueButton Greenlight Open Redirect vulnerability
Résumé
BigBlueButton Greenlight Open Redirect vulnerability
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Greenlight is an end-user interface for BigBlueButton servers. Versions prior to 2.13.0 have an open redirect vulnerability in the Login page due to unchecked the value of the return_to cookie. Versions 2.13.0 contains a patch for the issue.
Références
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- patch github.com
- web huntr.com