CVE-2020-26163

概要

参考情報

• bigbluebutton/greenlight#1543 · Patch
• bigbluebutton/greenlight release release-2.5.6 · Third Party Advisory
• sakshamanand.com/host-header-injection-bigbluebutton · Exploit

greenlight のその他の脆弱性

• CVE-2022-36029中 6.1Greenlight is an end-user interface for BigBlueButton servers. Versions prior to 2.13.0 have an open redirect vulnerability in the Login pag…
• CVE-2022-36028中 6.1Greenlight is an end-user interface for BigBlueButton servers. Versions prior to 2.13.0 have an open redirect vulnerability in the Login pag…
• CVE-2022-31039中 5.3Greenlight is a simple front-end interface for your BigBlueButton server. In affected versions an attacker can view any room's settings even…
• CVE-2022-26497中 5.4BigBlueButton Greenlight 2.11.1 allows XSS. A threat actor could have a username containing a JavaScript payload. The payload gets executed …
• CVE-2020-27642中 6.1A cross-site scripting (XSS) vulnerability exists in the 'merge account' functionality in admins.js in BigBlueButton Greenlight 2.7.6.