HIGH7.5
GHSA-g485-29gq-6h2h
Sensitive Data Exposure in miniorange_saml
Quick fix
GHSA-g485-29gq-6h2h — miniorange/miniorange-saml: upgrade to the fixed version with the command below.
composer require miniorange/miniorange-saml:^1.4.3Details
The miniorange_saml (aka Miniorange Saml) extension before 1.4.3 for TYPO3 allows Sensitive Data Exposure of API credentials and private keys.
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist/miniorange/miniorange-saml
Introduced in:
0Fixed in: 1.4.3Fix
composer require miniorange/miniorange-saml:^1.4.3