CVE-2026-27736
BigBlueButton has Open Redirect vulnerability in ApiController
概要
BigBlueButton has Open Redirect vulnerability in ApiController
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
BigBlueButton is an open-source virtual classroom. In versions on the 3.x branch prior to 3.0.20, the string received with errorRedirectUrl lacks validation, using it directly in the respondWithRedirect function leads to an Open Redirect vulnerability. BigBlueButton 3.0.20 patches the issue. No known workarounds are available.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com