EUVD-2021-2058

Malware in sbrugna...

CVE-2021-36785

The miniorangesaml aka Miniorange Saml extension before 1.4.3 for TYPO3 allows XSS...

saml allows bypassing CSRF protection for any URL

An extension point in Jenkins allows selectively disabling cross-site request forgery CSRF protection for specific URLs. saml implements this extension point for the URL that users are redirected to after login. In saml 2.0.7 and earlier this implementation is too permissive, allowing attackers t...

CVE-2021-36786

The miniorangesaml aka Miniorange Saml extension before 1.4.3 for TYPO3 allows Sensitive Data Exposure of API credentials and private keys...

PT-2021-21354

Name of the Vulnerable Software and Affected Versions miniorange saml extension versions prior to 1.4.3 Description The issue allows sensitive data exposure of API credentials and private keys. Recommendations For miniorange saml extension versions prior to 1.4.3, update to version 1.4.3 or later...

PT-2021-21353

Name of the Vulnerable Software and Affected Versions miniorange saml extension for TYPO3 version 1.4.2 and earlier Description The issue allows for XSS. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents whe...