{"id":"GHSA-g485-29gq-6h2h","aliases":["CVE-2021-36786"],"title":"Sensitive Data Exposure in miniorange_saml","description":"The miniorange_saml (aka Miniorange Saml) extension before 1.4.3 for TYPO3 allows Sensitive Data Exposure of API credentials and private keys.","severity":"high","score":7.5,"published":"2021-09-01T18:36:24.000Z","modified":"2023-11-08T04:06:16.489Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"miniorange/miniorange-saml","ranges":[{"events":[{"introduced":"0"},{"fixed":"1.4.3"}],"type":"ECOSYSTEM"}],"versions":["1.1.2","1.2.0","1.2.3","1.3.0","1.3.1","1.3.2","1.3.3","1.4.0","1.4.1","1.4.2"],"fixed":["1.4.3"]}],"references":["https://nvd.nist.gov/vuln/detail/CVE-2021-36786","https://github.com/miniOrangeDev/miniorange-saml-typo3-sso","https://typo3.org/security/advisory/typo3-ext-sa-2021-011"],"sources":[{"name":"OSV","id":"GHSA-g485-29gq-6h2h","modified":"2023-11-08T04:06:16.489683Z","url":"https://osv.dev/vulnerability/GHSA-g485-29gq-6h2h"}],"assessments":[{"source":"OSV","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","score":7.5}]}