CVE-2026-46688

The Meeting Room Booking System (MRBS) is a PHP-based application for booking meeting rooms. Prior to version 1.12.2, an unauthenticated request can be made to redirect the user to a query-specified location. This allows an attacker to create a specially-crafted URL to an MRBS installation that will cause the user who clicks it to be redirected to the attacker-specified redirect URL, which could be a spoofed MRBS login page, for example. Version 1.12.2 contains a fix. No known workarounds are available.

CVSS

No CVSS.

References

Link	Resource
https://github.com/meeting-room-booking-system/mrbs-code/releases/tag/v1.12.2
https://github.com/meeting-room-booking-system/mrbs-code/security/advisories/GHSA-6xcj-g522-859f

Configurations

No configuration.

History

23 Oct 2026, 19:10

Type	Values Removed	Values Added
Summary		(es) El Sistema de Reserva de Salas de Reuniones (MRBS) es una aplicación basada en PHP para reservar salas de reuniones. Antes de la versión 1.12.2, se podía realizar una solicitud no autenticada para redirigir al usuario a una ubicación especificada por la consulta. Esto permite a un atacante crear una URL especialmente diseñada para una instalación de MRBS que hará que el usuario que haga clic en ella sea redirigido a la URL de redirección especificada por el atacante, que podría ser una página de inicio de sesión de MRBS falsificada, por ejemplo. La versión 1.12.2 contiene una solución. No se conocen soluciones alternativas disponibles.

Information

Published : 2026-08-13 00:17

Updated : 2026-10-23 19:10

NVD link : CVE-2026-46688

Mitre link : CVE-2026-46688

CVE.ORG link : CVE-2026-46688

JSON object : View

Products Affected

No product.

CWE

CWE-601

URL Redirection to Untrusted Site ('Open Redirect')

{"id": "CVE-2026-46688", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-46688", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-13T13:11:14.196139Z"}}], "cvssMetricV40": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 6.9, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "ACTIVE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "meeting-room-booking-system", "product": "mrbs-code", "versions": [{"status": "affected", "version": "< 1.12.2"}]}]}], "published": "2026-08-13T00:17:32.250", "references": [{"url": "https://github.com/meeting-room-booking-system/mrbs-code/releases/tag/v1.12.2", "source": "security-advisories@github.com"}, {"url": "https://github.com/meeting-room-booking-system/mrbs-code/security/advisories/GHSA-6xcj-g522-859f", "source": "security-advisories@github.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-601"}]}], "descriptions": [{"lang": "en", "value": "The Meeting Room Booking System (MRBS) is a PHP-based application for booking meeting rooms. Prior to version 1.12.2, an unauthenticated request can be made to redirect the user to a query-specified location. This allows an attacker to create a specially-crafted URL to an MRBS installation that will cause the user who clicks it to be redirected to the attacker-specified redirect URL, which could be a spoofed MRBS login page, for example. Version 1.12.2 contains a fix. No known workarounds are available."}, {"lang": "es", "value": "El Sistema de Reserva de Salas de Reuniones (MRBS) es una aplicaci\u00f3n basada en PHP para reservar salas de reuniones. Antes de la versi\u00f3n 1.12.2, se pod\u00eda realizar una solicitud no autenticada para redirigir al usuario a una ubicaci\u00f3n especificada por la consulta. Esto permite a un atacante crear una URL especialmente dise\u00f1ada para una instalaci\u00f3n de MRBS que har\u00e1 que el usuario que haga clic en ella sea redirigido a la URL de redirecci\u00f3n especificada por el atacante, que podr\u00eda ser una p\u00e1gina de inicio de sesi\u00f3n de MRBS falsificada, por ejemplo. La versi\u00f3n 1.12.2 contiene una soluci\u00f3n. No se conocen soluciones alternativas disponibles."}], "lastModified": "2026-10-23T19:10:00.167", "sourceIdentifier": "security-advisories@github.com"}