Bigbluebutton Greenlight
6 CVEs affecting Bigbluebutton Greenlight. Latest disclosed: 2024-04-25. Critical: 2, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-36029 | Critical | 9.1 | 2024-04-25 | Greenlight is an end-user interface for BigBlueButton servers. Versions prior to 2.13.0 have an open redirect vulnerability in the Login page due to unchecked… |
CVE-2022-36028 | Critical | 9.1 | 2024-04-25 | Greenlight is an end-user interface for BigBlueButton servers. Versions prior to 2.13.0 have an open redirect vulnerability in the Login page due to unchecked… |
CVE-2020-26163 | High | 8.8 | 2020-09-30 | BigBlueButton Greenlight before 2.5.6 allows HTTP header (Host and Origin) attacks, which can result in Account Takeover if a victim follows a spoofed password… |
CVE-2020-27642 | Medium | 6.1 | 2020-10-22 | A cross-site scripting (XSS) vulnerability exists in the 'merge account' functionality in admins.js in BigBlueButton Greenlight 2.7.6. |
CVE-2022-26497 | Medium | 5.4 | 2022-06-02 | BigBlueButton Greenlight 2.11.1 allows XSS. A threat actor could have a username containing a JavaScript payload. The payload gets executed in the browser of t… |
CVE-2022-31039 | Medium | 4.3 | 2022-06-27 | Greenlight is a simple front-end interface for your BigBlueButton server. In affected versions an attacker can view any room's settings even though they are no… |