CVE-2020-26163

Mô tả

Tham khảo

• bigbluebutton/greenlight#1543 · Patch
• bigbluebutton/greenlight release release-2.5.6 · Third Party Advisory
• sakshamanand.com/host-header-injection-bigbluebutton · Exploit

Lỗ hổng khác của greenlight

• CVE-2022-36029TRUNG BÌNH 6.1Greenlight is an end-user interface for BigBlueButton servers. Versions prior to 2.13.0 have an open redirect vulnerability in the Login pag…
• CVE-2022-36028TRUNG BÌNH 6.1Greenlight is an end-user interface for BigBlueButton servers. Versions prior to 2.13.0 have an open redirect vulnerability in the Login pag…
• CVE-2022-31039TRUNG BÌNH 5.3Greenlight is a simple front-end interface for your BigBlueButton server. In affected versions an attacker can view any room's settings even…
• CVE-2022-26497TRUNG BÌNH 5.4BigBlueButton Greenlight 2.11.1 allows XSS. A threat actor could have a username containing a JavaScript payload. The payload gets executed …
• CVE-2020-27642TRUNG BÌNH 6.1A cross-site scripting (XSS) vulnerability exists in the 'merge account' functionality in admins.js in BigBlueButton Greenlight 2.7.6.