漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
BigBlueButton has Open Redirect through bigbluebutton/api/join via get-parameter "logoutURL"
Vulnerability Description
BigBlueButton is an open-source virtual classroom. Versions prior to 3.0.24 have an Open Redirect through bigbluebutton/api/join via get-parameter "logoutURL." Version 3.0.24 has adjusted the handling of requests with incorrect checksum so that the default logoutURL is used. No known workarounds are available.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Vulnerability Type
指向未可信站点的URL重定向(开放重定向)
Vulnerability Title
BigBlueButton 输入验证错误漏洞
Vulnerability Description
BigBlueButton是BigBlueButton社区的一套开源的Web会议系统。 BigBlueButton 3.0.24之前版本存在输入验证错误漏洞，该漏洞源于bigbluebutton/api/join中的get-parameter logoutURL存在开放重定向问题，可能导致重定向攻击。
CVSS Information
N/A
Vulnerability Type
N/A