{"id":"GHSA-jj8r-p9f5-fmvv","aliases":["CVE-2021-36785"],"title":"Cross-site Scripting in TYPO3 extension","description":"The miniorange_saml (aka Miniorange Saml) extension before 1.4.3 for TYPO3 allows XSS.","severity":"high","score":8.5,"published":"2021-08-30T17:22:25.000Z","modified":"2023-11-08T04:06:16.428Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"miniorange/miniorange-saml","ranges":[{"events":[{"introduced":"0"},{"fixed":"1.4.3"}],"type":"ECOSYSTEM"}],"versions":["1.1.2","1.2.0","1.2.3","1.3.0","1.3.1","1.3.2","1.3.3","1.4.0","1.4.1","1.4.2"],"fixed":["1.4.3"]}],"references":["https://nvd.nist.gov/vuln/detail/CVE-2021-36785","https://github.com/miniOrangeDev/miniorange-saml-typo3-sso/commit/1fe2802267ffe1b48823d9d8b3a496c870a0af48","https://github.com/miniOrangeDev/miniorange-saml-typo3-sso","https://typo3.org/help/security-advisories/security","https://typo3.org/security/advisory/typo3-ext-sa-2021-011"],"sources":[{"name":"OSV","id":"GHSA-jj8r-p9f5-fmvv","modified":"2023-11-08T04:06:16.428710Z","url":"https://osv.dev/vulnerability/GHSA-jj8r-p9f5-fmvv"}],"assessments":[{"source":"OSV","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N","score":8.5}]}