Lucene search

K

Greenlight Security Vulnerabilities

cve
cve

CVE-2022-36029

Greenlight is an end-user interface for BigBlueButton servers. Versions prior to 2.13.0 have an open redirect vulnerability in the Login page due to unchecked the value of the return_to cookie. Versions 2.13.0 contains a patch for the...

9.1CVSS

9AI Score

0.001EPSS

2024-04-25 09:15 PM
31
cve
cve

CVE-2022-36028

Greenlight is an end-user interface for BigBlueButton servers. Versions prior to 2.13.0 have an open redirect vulnerability in the Login page due to unchecked the value of the return_to cookie. Versions 2.13.0 contains a patch for the...

9.1CVSS

6.6AI Score

0.001EPSS

2024-04-25 09:15 PM
30
cve
cve

CVE-2022-31039

Greenlight is a simple front-end interface for your BigBlueButton server. In affected versions an attacker can view any room's settings even though they are not authorized to do so. Only the room owner and administrator should be able to view a room's settings. This issue has been patched in...

5.3CVSS

5AI Score

0.001EPSS

2022-06-27 08:15 PM
40
4
cve
cve

CVE-2022-26497

BigBlueButton Greenlight 2.11.1 allows XSS. A threat actor could have a username containing a JavaScript payload. The payload gets executed in the browser of the victim in the "Share room access" dialog if the victim has shared access to the particular room with the attacker...

5.4CVSS

5.3AI Score

0.001EPSS

2022-06-02 06:15 PM
52
3
cve
cve

CVE-2020-27642

A cross-site scripting (XSS) vulnerability exists in the 'merge account' functionality in admins.js in BigBlueButton Greenlight...

6.1CVSS

5.9AI Score

0.001EPSS

2020-10-22 01:15 PM
14
cve
cve

CVE-2020-26163

BigBlueButton Greenlight before 2.5.6 allows HTTP header (Host and Origin) attacks, which can result in Account Takeover if a victim follows a spoofed password-reset...

8.8CVSS

8.6AI Score

0.005EPSS

2020-09-30 06:15 PM
18