CVE-2021-36786: High severity miniorange saml vulnerability
The miniorangesaml (aka Miniorange Saml) extension before 1.4.3 for TYPO3 allows Sensitive Data Exposure of API credentials and private keys.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-36786?
CVE-2021-36786 is a vulnerability in the miniorange_saml (aka Miniorange Saml) extension before version 1.4.3 for TYPO3 that allows Sensitive Data Exposure of API credentials and private keys.
What software is affected by CVE-2021-36786?
The miniorange_saml (aka Miniorange Saml) extension before version 1.4.3 for TYPO3 is affected by CVE-2021-36786.
What is the severity of CVE-2021-36786?
CVE-2021-36786 has a severity level of 7.5 (High).
How can I fix CVE-2021-36786?
To fix CVE-2021-36786, update the miniorange_saml (aka Miniorange Saml) extension to version 1.4.3 or later.
Where can I find more information about CVE-2021-36786?
You can find more information about CVE-2021-36786 at the TYPO3 security advisories page (https://typo3.org/security/advisory/typo3-ext-sa-2021-011).