Drupal 7 miniOrange SAML SP vulnerabilities

1 known vulnerability in Drupal 7 miniOrange SAML SP from Xecuify. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Drupal 8 miniOrange SAML SP: Improper Certificate Validation

  CVE-2022-26493Jun 3, 2022Xecuify

  Xecurify's miniOrange Premium, Standard, and Enterprise Drupal SAML SP modules possess an authentication and authorization bypass vulnerability. An attacker with access to a HTTP-request intercepting method is able to bypass authentication and authorization by