Critical severity9.1NVD Advisory· Published Apr 25, 2024· Updated Jun 17, 2026
CVE-2022-36029
CVE-2022-36029
Description
Greenlight is an end-user interface for BigBlueButton servers. Versions prior to 2.13.0 have an open redirect vulnerability in the Login page due to unchecked the value of the return_to cookie. Versions 2.13.0 contains a patch for the issue.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:bigbluebutton:greenlight:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:bigbluebutton:greenlight:*:*:*:*:*:*:*:*range: <2.13.0
- (no CPE)range: <2.13.0
- (no CPE)range: 0
Patches
Vulnerability mechanics
References
2- github.com/bigbluebutton/greenlight/commit/20fe1ee71b5703fcc4ed698a959ad224fed19623nvdPatch
- huntr.com/bounties/ba5834bd-1f04-4936-8e93-2442d45403bahttps://nvdBroken LinkThird Party Advisory
News mentions
0No linked articles in our index yet.