Filtered by vendor Bigbluebutton Subscriptions
Filtered by product Greenlight Subscriptions
Total 4 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2020-27642 1 Bigbluebutton 1 Greenlight 2024-08-04 6.1 Medium
A cross-site scripting (XSS) vulnerability exists in the 'merge account' functionality in admins.js in BigBlueButton Greenlight 2.7.6.
CVE-2020-26163 1 Bigbluebutton 1 Greenlight 2024-08-04 8.8 High
BigBlueButton Greenlight before 2.5.6 allows HTTP header (Host and Origin) attacks, which can result in Account Takeover if a victim follows a spoofed password-reset link.
CVE-2022-31039 1 Bigbluebutton 1 Greenlight 2024-08-03 4.3 Medium
Greenlight is a simple front-end interface for your BigBlueButton server. In affected versions an attacker can view any room's settings even though they are not authorized to do so. Only the room owner and administrator should be able to view a room's settings. This issue has been patched in release version 2.12.6.
CVE-2022-26497 1 Bigbluebutton 1 Greenlight 2024-08-03 5.4 Medium
BigBlueButton Greenlight 2.11.1 allows XSS. A threat actor could have a username containing a JavaScript payload. The payload gets executed in the browser of the victim in the "Share room access" dialog if the victim has shared access to the particular room with the attacker previously.