Sensitive Data Exposure in miniorange_saml

높음 7.5CVE-2021-36786 · GHSA-g485-29gq-6h2h · Published 13/08/2021 · updated 17/06/2026

요약

CVE-2021-36786은(는) miniorange/miniorange-saml, saml (miniorange)에 영향을 주는 높음 (CVSS 7.5) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 1.00%, 전체 취약점의 62.7%보다 높음.
조치: 1.4.3 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
miniorange/miniorange-saml Packagist	`< 1.4.3`	`1.4.3`
saml miniorange	`< 1.4.3`	`1.4.3`

The miniorange_saml (aka Miniorange Saml) extension before 1.4.3 for TYPO3 allows Sensitive Data Exposure of API credentials and private keys.

NVD description

The miniorange_saml (aka Miniorange Saml) extension before 1.4.3 for TYPO3 allows Sensitive Data Exposure of API credentials and private keys.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.