Meeting-room-booking-system vulnerabilities
We track 2 vulnerabilities in Meeting-room-booking-system products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 13, 2026.
2vulnerabilities
0critical
2high
0exploited
8.4average CVSS score
Latest Meeting-room-booking-system vulnerabilities
- 8.1 High severity
mrbs-code: Weak Password Recovery Mechanism for Forgotten Password
MRBS before 1.13.0 contains a password reset poisoning vulnerability that allows unauthenticated attackers to redirect reset links by forging the Host header when $url_base is unset. Attackers can request a reset for a victim so AuthDb::notifyUser() emails a l
- 8.7 High severity
mrbs-code: Server-Side Request Forgery
The Meeting Room Booking System (MRBS) is a PHP-based application for booking meeting rooms. Prior to version 1.12.2, a user-supplied private/local URI can be made to be fetched without checks. Version 1.12.2 contains a fix. No known workarounds are available.