Vendor

Xecuify

1 known vulnerabilities.

Products

Drupal 8 miniOrange SAML SP 1 Drupal 9 miniOrange SAML SP 1 Drupal 7 miniOrange SAML SP 1

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Critical 9.8

CVE-2022-26493

miniOrange SAML Authentication Bypass

Xecurify's miniOrange Premium, Standard, and Enterprise Drupal SAML SP modules possess an authentication and authorization bypass vulnerability. An attacker with access to a HTTP-request intercepting method is able to bypass authentication and authorization b…

Xecuify Drupal 8 miniOrange SAML SP Drupal 7 miniOrange SAML SP Drupal 9 miniOrange SAML SP Web / CMS Alpine

Jun 3, 2022