CVE-2022-36029 - OpenCVE

Greenlight is an end-user interface for BigBlueButton servers. Versions prior to 2.13.0 have an open redirect vulnerability in the Login page due to unchecked the value of the `return_to` cookie. Versions 2.13.0 contains a patch for the issue.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

References

Link	Providers
https://github.com/bigbluebutton/greenlight/commit/20fe1ee71b5703fcc4ed698a959ad224fed19623
https://huntr.com/bounties/ba5834bd-1f04-4936-8e93-2442d45403bahttps://

History

No history.

MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published: 2024-04-25T20:42:15.171Z

Updated: 2024-08-29T20:11:18.365Z

Reserved: 2022-07-15T23:52:24.306Z

Link: CVE-2022-36029

Vulnrichment

Updated: 2024-08-03T09:52:00.349Z

NVD

Status : Awaiting Analysis

Published: 2024-04-25T21:15:46.523

Modified: 2024-04-26T12:58:17.720

Link: CVE-2022-36029

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2022-36029", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2022-07-15T23:52:24.306Z", "datePublished": "2024-04-25T20:42:15.171Z", "dateUpdated": "2024-08-29T20:11:18.365Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "packageName": "greenlight", "product": "greenlight", "repo": "https://github.com/bigbluebutton/greenlight", "vendor": "bigbluebutton", "versions": [{"lessThan": "2.13.0", "status": "affected", "version": "0", "versionType": "semver"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Greenlight is an end-user interface for BigBlueButton servers. Versions prior to 2.13.0 have an open redirect vulnerability in the Login page due to unchecked the value of the `return_to` cookie. Versions 2.13.0 contains a patch for the issue.<br>"}], "value": "Greenlight is an end-user interface for BigBlueButton servers. Versions prior to 2.13.0 have an open redirect vulnerability in the Login page due to unchecked the value of the `return_to` cookie. Versions 2.13.0 contains a patch for the issue.\n"}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 9.1, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-601", "description": "CWE-601 URL Redirection to Untrusted Site ('Open Redirect')", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2024-04-25T20:42:15.171Z"}, "references": [{"url": "https://huntr.com/bounties/ba5834bd-1f04-4936-8e93-2442d45403bahttps://"}, {"url": "https://github.com/bigbluebutton/greenlight/commit/20fe1ee71b5703fcc4ed698a959ad224fed19623"}], "source": {"discovery": "UNKNOWN"}, "title": "BigBlueButton Greenlight Open Redirect vulnerability", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T09:52:00.349Z"}, "title": "CVE Program Container", "references": [{"url": "https://huntr.com/bounties/ba5834bd-1f04-4936-8e93-2442d45403bahttps://", "tags": ["x_transferred"]}, {"url": "https://github.com/bigbluebutton/greenlight/commit/20fe1ee71b5703fcc4ed698a959ad224fed19623", "tags": ["x_transferred"]}]}, {"affected": [{"vendor": "bigbluebutton", "product": "greenlight", "cpes": ["cpe:2.3:a:bigbluebutton:greenlight:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThan": "2.13.0", "versionType": "semver"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-08-27T20:17:21.028398Z", "id": "CVE-2022-36029", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-29T20:11:18.365Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://huntr.com/bounties/ba5834bd-1f04-4936-8e93-2442d45403bahttps://", "tags": ["x_transferred"]}, {"url": "https://github.com/bigbluebutton/greenlight/commit/20fe1ee71b5703fcc4ed698a959ad224fed19623", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T09:52:00.349Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2022-36029", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-08-27T20:17:21.028398Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:bigbluebutton:greenlight:-:*:*:*:*:*:*:*"], "vendor": "bigbluebutton", "product": "greenlight", "versions": [{"status": "affected", "version": "0", "lessThan": "2.13.0", "versionType": "semver"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-27T20:20:03.121Z"}}], "cna": {"title": "BigBlueButton Greenlight Open Redirect vulnerability", "source": {"discovery": "UNKNOWN"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.1, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"repo": "https://github.com/bigbluebutton/greenlight", "vendor": "bigbluebutton", "product": "greenlight", "versions": [{"status": "affected", "version": "0", "lessThan": "2.13.0", "versionType": "semver"}], "packageName": "greenlight", "defaultStatus": "unaffected"}], "references": [{"url": "https://huntr.com/bounties/ba5834bd-1f04-4936-8e93-2442d45403bahttps://"}, {"url": "https://github.com/bigbluebutton/greenlight/commit/20fe1ee71b5703fcc4ed698a959ad224fed19623"}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "Greenlight is an end-user interface for BigBlueButton servers. Versions prior to 2.13.0 have an open redirect vulnerability in the Login page due to unchecked the value of the `return_to` cookie. Versions 2.13.0 contains a patch for the issue.\n", "supportingMedia": [{"type": "text/html", "value": "Greenlight is an end-user interface for BigBlueButton servers. Versions prior to 2.13.0 have an open redirect vulnerability in the Login page due to unchecked the value of the `return_to` cookie. Versions 2.13.0 contains a patch for the issue.<br>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-601", "description": "CWE-601 URL Redirection to Untrusted Site ('Open Redirect')"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2024-04-25T20:42:15.171Z"}}}, "cveMetadata": {"cveId": "CVE-2022-36029", "state": "PUBLISHED", "dateUpdated": "2024-08-29T20:11:18.365Z", "dateReserved": "2022-07-15T23:52:24.306Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2024-04-25T20:42:15.171Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.1"}