CVE-2022-36029: BigBlueButton Greenlight Open Redirect vulnerability
Greenlight is an end-user interface for BigBlueButton servers. Versions prior to 2.13.0 have an open redirect vulnerability in the Login page due to unchecked the value of the returnto cookie. Versions 2.13.0 contains a patch for the issue.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-36029?
CVE-2022-36029 has been classified as a medium severity vulnerability due to its potential for exploitation through open redirects.
How do I fix CVE-2022-36029?
To fix CVE-2022-36029, upgrade to BigBlueButton Greenlight version 2.13.0 or later where the vulnerability has been patched.
What is the impact of CVE-2022-36029?
The impact of CVE-2022-36029 involves the possibility of attackers redirecting users to malicious sites through the Login page.
Which versions of BigBlueButton Greenlight are affected by CVE-2022-36029?
Versions of BigBlueButton Greenlight prior to 2.13.0 are affected by CVE-2022-36029.
Is CVE-2022-36029 a common vulnerability?
CVE-2022-36029 is a specific vulnerability that may be common in web applications but should be addressed uniquely based on the affected software.