Critical severity9.1NVD Advisory· Published Apr 25, 2024· Updated Jun 17, 2026

CVE-2022-36028

Description

Greenlight is an end-user interface for BigBlueButton servers. Versions prior to 2.13.0 have an open redirect vulnerability in the Login page due to unchecked the value of the return_to cookie. Versions 2.13.0 contains a patch for the issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Bigbluebutton/Greenlightllm-fuzzy
Range: <2.13.0
bigbluebutton/greenlightv5
Range: 0

Patches

Vulnerability mechanics

References

github.com/bigbluebutton/greenlight/commit/20fe1ee71b5703fcc4ed698a959ad224fed19623nvdPatch
huntr.com/bounties/ba5834bd-1f04-4936-8e93-2442d45403bahttps://nvdBroken LinkThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.591
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000