VULNERABILITY INTELLIGENCE

CVE-2021-36786

CVSS score7.5 HIGH
EPSS probability1.00%
CISA KEVNot currently listed
Published2021-08-13
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

The miniorange_saml (aka Miniorange Saml) extension before 1.4.3 for TYPO3 allows Sensitive Data Exposure of API credentials and private keys.

Weakness classification

  • nvd@nist.gov: CWE-922

Primary references