CVE-2020-26163

Description

References

• bigbluebutton/greenlight#1543 · Patch
• bigbluebutton/greenlight release release-2.5.6 · Third Party Advisory
• sakshamanand.com/host-header-injection-bigbluebutton · Exploit

More vulnerabilities in greenlight

• CVE-2022-36029MEDIUM 6.1Greenlight is an end-user interface for BigBlueButton servers. Versions prior to 2.13.0 have an open redirect vulnerability in the Login pag…
• CVE-2022-36028MEDIUM 6.1Greenlight is an end-user interface for BigBlueButton servers. Versions prior to 2.13.0 have an open redirect vulnerability in the Login pag…
• CVE-2022-31039MEDIUM 5.3Greenlight is a simple front-end interface for your BigBlueButton server. In affected versions an attacker can view any room's settings even…
• CVE-2022-26497MEDIUM 5.4BigBlueButton Greenlight 2.11.1 allows XSS. A threat actor could have a username containing a JavaScript payload. The payload gets executed …
• CVE-2020-27642MEDIUM 6.1A cross-site scripting (XSS) vulnerability exists in the 'merge account' functionality in admins.js in BigBlueButton Greenlight 2.7.6.