—
DRUPAL-CONTRIB-2020-038
Details
This module enables your users residing at a SAML 2.0 compliant Identity Provider to login to your Drupal website.
The module has two Authentication Bypass vulnerabilities.
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist:https://packages.drupal.org/8/drupal/miniorange_saml
Introduced in:
0Fixed in: 2.14.0Upgrade drupal/miniorange_saml to 2.14.0 or newer (ecosystem packagist:https://packages.drupal.org/8).