drupal/miniorange_saml vulnerabilities (Packagist)
15 vulnerabilities.
drupal/miniorange_samlPackagistSAML SSO - Service Provider - Moderately critical - Server Side Request Forgery - SA-CONTRIB-2026-1513.3 Lowdrupal/miniorange_samlPackagistSAML SSO - Service Provider - Moderately critical - Insufficient replay protection - SA-CONTRIB-2026-1503.1 Lowdrupal/miniorange_samlPackagistSAML SSO - Service Provider - Moderately critical - Information disclosure - SA-CONTRIB-2026-1493.8 Lowdrupal/miniorange_samlPackagistSAML SSO - Service Provider - Moderately critical - Embedded credentials - SA-CONTRIB-2026-1485.3 Mediumdrupal/miniorange_samlPackagistSAML SSO - Service Provider - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-1473.3 Lowdrupal/miniorange_samlPackagistSAML SSO - Service Provider - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-1463.5 Lowdrupal/miniorange_samlPackagistSAML SSO - Service Provider - Moderately critical - Authentication bypass - SA-CONTRIB-2026-1454.8 Mediumdrupal/miniorange_samlPackagistSAML SSO - Service Provider - Critical - Weak cryptographic practices - SA-CONTRIB-2026-1444.8 Mediumdrupal/miniorange_samlPackagistSAML SSO - Service Provider - Critical - Open redirect - SA-CONTRIB-2026-1435.4 Mediumdrupal/miniorange_samlPackagistSAML SSO - Service Provider - Critical - Improper certificate validation - SA-CONTRIB-2026-1424.8 Mediumdrupal/miniorange_samlPackagistSAML SSO - Service Provider - Critical - Improper access control - SA-CONTRIB-2026-1416.5 Mediumdrupal/miniorange_samlPackagistSAML SSO - Service Provider - Critical - Authentication bypass - SA-CONTRIB-2026-0317.4 Highdrupal/miniorange_samlPackagistSAML SSO - Service Provider - Critical - Cross-site scripting - SA-CONTRIB-2026-0186.1 Mediumdrupal/miniorange_samlPackagistThis module provides a solution to authenticate visitors using existing SAML providers. Certain non-default configurations allow a malicious user to login as any chosen user. The vulnerability is miti…No scoredrupal/miniorange_samlPackagistThis module enables your users residing at a SAML 2.0 compliant Identity Provider to login to your Drupal website. The module has two Authentication Bypass vulnerabilities.No score