Approved changes feed: RSS · Atom

cpe:2.3:a:bigbluebutton:greenlight:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorBigbluebutton (67de7263-3aa7-53b7-b8c9-b6d6bd69b5a3)
ProductGreenlight (aad47955-f441-5f78-b55c-cd9bc3333c35)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:docker/bigbluebutton/greenlight purl2cpe 2026-06-01 10:18:08.248759
pkg:github/bigbluebutton/greenlight purl2cpe 2026-06-01 10:18:08.248762
pkg:rpm/opensuse/greenlight purl2cpe 2026-06-01 10:18:08.248765

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-36029 vulnerable 2026-06-08 05:46:06.181559 BigBlueButton Greenlight Open Redirect vulnerability
CRITICAL (9.1)
Greenlight is an end-user interface for BigBlueButton servers. Versions prior to 2.13.0 have an open redirect vulnerability in the Login page due to unchecked the value of the `return_to` cookie. Versions 2.13.0 contains a patch for the issue.
Published: 2024-04-25T20:42:15.171Z
Updated: 2024-08-29T20:11:18.365Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36028 vulnerable 2026-06-08 05:46:06.180052 BigBlueButton Greenlight Open Redirect vulnerability
CRITICAL (9.1)
Greenlight is an end-user interface for BigBlueButton servers. Versions prior to 2.13.0 have an open redirect vulnerability in the Login page due to unchecked the value of the `return_to` cookie. Versions 2.13.0 contains a patch for the issue.
Published: 2024-04-25T20:36:37.543Z
Updated: 2024-08-03T09:51:59.902Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.