CVE-2026-27736
BigBlueButton has Open Redirect vulnerability in ApiController
Résumé
BigBlueButton has Open Redirect vulnerability in ApiController
Description d'origine
La description telle que publiée par la source (souvent en anglais).
BigBlueButton is an open-source virtual classroom. In versions on the 3.x branch prior to 3.0.20, the string received with errorRedirectUrl lacks validation, using it directly in the respondWithRedirect function leads to an Open Redirect vulnerability. BigBlueButton 3.0.20 patches the issue. No known workarounds are available.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com