Priority MEDIUM 47
Greenlight is an end-user interface for BigBlueButton servers.
bigbluebutton
Records67All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high18CVSS 7.0–8.9
Exploited now
bigbluebutton records in CISA KEVNo bigbluebutton vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
6 records in Greenlight · all components
Priority MEDIUM 47
Greenlight is an end-user interface for BigBlueButton servers.
TI-2020-15996 CVE-2020-26163 · GHSA-5wp7-85p7-qq6v
BigBlueButton Greenlight before 2.5.6 allows HTTP header (Host and Origin) attacks, which…
Priority MEDIUM 41
BigBlueButton Greenlight before 2.5.6 allows HTTP header (Host and Origin) attacks, which can result in Account Takeover if a victim follows a spoofed password-reset link.
TI-2020-16758 CVE-2020-27642 · GHSA-vfp2-qcr6-2pj6
A cross-site scripting (XSS) vulnerability exists in the 'merge account' functionality in…
Priority LOW 29
A cross-site scripting (XSS) vulnerability exists in the 'merge account' functionality in admins.js in BigBlueButton Greenlight 2.7.6.
TI-2022-09840 CVE-2022-26497 · GHSA-w3cv-3c36-h8j2
BigBlueButton Greenlight 2.11.1 allows XSS.
Priority LOW 26
BigBlueButton Greenlight 2.11.1 allows XSS.
TI-2022-13084 CVE-2022-31039
Improper privilege management - Anyone can view room settings in GreenLight
Priority LOW 25
Greenlight is a simple front-end interface for your BigBlueButton server.