A vulnerability classified as problematic has been found in BigBlueButton Greenlight 2.11.1. The impacted element is an unknown function of the component Share Room Access Handler. The manipulation of the argument Username leads to cross site scripting.
This vulnerability is listed as CVE-2022-26497. The attack may be initiated remotely. In addition, an exploit is available.
Intelligence View
⚡ tsecurity.de Intelligence
CVE-2022-26497 | BigBlueButton Greenlight 2.11.1 Share Room Access Username cross site scripting (EUVD-2022-31055)
A vulnerability classified as problematic has been found in BigBlueButton Greenlight 2.11.1. The impacted element is an unknown function of the component Share…
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
Compliance, SLA & Vendor Adherence
Advisory-Prüfung · Score-Einordnung · Fristen
Advisory Radar
Workaround & Virtual-Patching empfohlen
Hersteller-Sicherheitsmeldungen & Patch-Status
Handlungsempfehlung für Administratoren
Öffentliche PoCs existieren. Isolieren Sie das System oder wenden Sie Micro-Segmentierungsregeln an, bis offizielle Patches vorliegen.
Referenzen aus der Primärquelle („Verifiziert" nur bei Hersteller-Domäne):
-
Upstream-Referenz (Code-Hosting, kein Advisory)github.com
-
Web Referencewww.mgm-sp.com
1 öffentliche Exploit-Referenz(en) detektiert (Packet Storm Security).
PoC einsehen