high7.5
CVE-2021-36786
Sensitive Data Exposure in miniorange_saml
Impact
The miniorange_saml (aka Miniorange Saml) extension before 1.4.3 for TYPO3 allows Sensitive Data Exposure of API credentials and private keys.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | miniorange/miniorange-saml | < 1.4.3 | 1.4.3 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Miniorange | Saml | before 1.4.3 |