CVE-2021-36786: Sensitive Data Exposure in miniorange_saml
Sensitive Data Exposure in miniorangesaml
Other sources
The miniorangesaml (aka Miniorange Saml) extension before 1.4.3 for TYPO3 allows Sensitive Data Exposure of API credentials and private keys.
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
composer/miniorange/miniorange-samlto a version that resolves this vulnerability.Fixed in 1.4.3
Event History
Frequently Asked Questions
What is CVE-2021-36786?
CVE-2021-36786 is a vulnerability in the miniorange_saml (aka Miniorange Saml) extension before version 1.4.3 for TYPO3 that allows Sensitive Data Exposure of API credentials and private keys.
What software is affected by CVE-2021-36786?
The miniorange_saml (aka Miniorange Saml) extension before version 1.4.3 for TYPO3 is affected by CVE-2021-36786.
What is the severity of CVE-2021-36786?
CVE-2021-36786 has a severity level of 7.5 (High).
How can I fix CVE-2021-36786?
To fix CVE-2021-36786, update the miniorange_saml (aka Miniorange Saml) extension to version 1.4.3 or later.
Where can I find more information about CVE-2021-36786?
You can find more information about CVE-2021-36786 at the TYPO3 security advisories page (https://typo3.org/security/advisory/typo3-ext-sa-2021-011).