Sensitive Data Exposure in miniorange_saml

ALTO 7.5CVE-2021-36786 · GHSA-g485-29gq-6h2h · Published 13/08/2021 · updated 17/06/2026

Em resumo

CVE-2021-36786 é uma vulnerabilidade ALTO (CVSS 7.5) que afeta miniorange/miniorange-saml, saml (miniorange).
Chance de exploração nos próximos 30 dias (EPSS): 1.00%, maior que 62.7% das vulnerabilidades.
Correção: atualize para 1.4.3 ou posterior.

Package	Affected versions	Patched versions
miniorange/miniorange-saml Packagist	`< 1.4.3`	`1.4.3`
saml miniorange	`< 1.4.3`	`1.4.3`

The miniorange_saml (aka Miniorange Saml) extension before 1.4.3 for TYPO3 allows Sensitive Data Exposure of API credentials and private keys.

NVD description

The miniorange_saml (aka Miniorange Saml) extension before 1.4.3 for TYPO3 allows Sensitive Data Exposure of API credentials and private keys.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.