miniorange/miniorange-saml

Packagist2 known CVEs affecting this package

Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.

CVEs affecting miniorange/miniorange-samlpage 1 of 1

CVE-2021-36785MEDIUMCVSS 5.4EG 5.4fixed in 1.4.3
2021-08-13
vulnerable: 1.1.2 ... 1.4.2 (10 versions)
The miniorange_saml (aka Miniorange Saml) extension before 1.4.3 for TYPO3 allows XSS.
CVE-2021-36786HIGHCVSS 7.5EG 7.5fixed in 1.4.3
2021-08-13
vulnerable: 1.1.2 ... 1.4.2 (10 versions)
The miniorange_saml (aka Miniorange Saml) extension before 1.4.3 for TYPO3 allows Sensitive Data Exposure of API credentials and private keys.

Check whether miniorange/miniorange-saml is used in your infrastructure

EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for miniorange/miniorange-saml CVEs against the assets you own.

Book a Demo →