Sensitive Data Exposure in miniorange_saml

ALTO 7.5CVE-2021-36786 · GHSA-g485-29gq-6h2h · Published 13/08/2021 · updated 17/06/2026

En resumen

CVE-2021-36786 es una vulnerabilidad ALTO (CVSS 7.5) que afecta a miniorange/miniorange-saml, saml (miniorange).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.00%, mayor que el 62.7% de las vulnerabilidades.
Solución: actualizar a 1.4.3 o posterior.

Package	Affected versions	Patched versions
miniorange/miniorange-saml Packagist	`< 1.4.3`	`1.4.3`
saml miniorange	`< 1.4.3`	`1.4.3`

The miniorange_saml (aka Miniorange Saml) extension before 1.4.3 for TYPO3 allows Sensitive Data Exposure of API credentials and private keys.

NVD description

The miniorange_saml (aka Miniorange Saml) extension before 1.4.3 for TYPO3 allows Sensitive Data Exposure of API credentials and private keys.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.