GitHub Advisoryadvisory · Packagist

GHSA-g485-29gq-6h2h Sensitive Data Exposure in miniorange_saml

HIGH Published 2021-09-01 Modified 2021-08-30 Official page ↗

Aliases: CVE-2021-36786
Ecosystem: Packagist
Packages: miniorange/miniorange-saml
Severity: High
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses: CWE-922
Reviewed: 2021-08-30

Affected packages

• Packagist miniorange/miniorange-saml: < 1.4.3 → fixed in 1.4.3

Description

The miniorange_saml (aka Miniorange Saml) extension before 1.4.3 for TYPO3 allows Sensitive Data Exposure of API credentials and private keys.

Related

Alias · CVE (1)

CVE-2021-36786 The miniorange_saml (aka Miniorange Saml) extension before 1.4.3 for TYPO3 allows Sensitive Data Exposure of API credentials and private… vulnerability

Weakness · CWE (1)

CWE-922 Insecure Storage of Sensitive Information weakness

References