CVE-2022-36028

Description

References

• bigbluebutton/greenlight commit 20fe1ee · Patch
• huntr.com/bounties/ba5834bd-1f04-4936-8e93-2442d45403bahttps:/ · Broken Link

greenlight 的其他漏洞

• CVE-2022-36029中危 6.1Greenlight is an end-user interface for BigBlueButton servers. Versions prior to 2.13.0 have an open redirect vulnerability in the Login pag…
• CVE-2022-31039中危 5.3Greenlight is a simple front-end interface for your BigBlueButton server. In affected versions an attacker can view any room's settings even…
• CVE-2022-26497中危 5.4BigBlueButton Greenlight 2.11.1 allows XSS. A threat actor could have a username containing a JavaScript payload. The payload gets executed …
• CVE-2020-27642中危 6.1A cross-site scripting (XSS) vulnerability exists in the 'merge account' functionality in admins.js in BigBlueButton Greenlight 2.7.6.
• CVE-2020-26163高危 8.8BigBlueButton Greenlight before 2.5.6 allows HTTP header (Host and Origin) attacks, which can result in Account Takeover if a victim follows…