GHSA-jj8r-p9f5-fmvv

Source

https://github.com/advisories/GHSA-jj8r-p9f5-fmvv

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/08/GHSA-jj8r-p9f5-fmvv/GHSA-jj8r-p9f5-fmvv.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-jj8r-p9f5-fmvv

Aliases

CVE-2021-36785

Published

2021-08-30T17:22:25Z

Modified

2023-11-08T04:06:16.428710Z

Severity

8.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N CVSS Calculator

Summary

Cross-site Scripting in TYPO3 extension

Details

The miniorange_saml (aka Miniorange Saml) extension before 1.4.3 for TYPO3 allows XSS.

Database specific

{
    "github_reviewed_at": "2021-08-30T17:07:59Z",
    "severity": "MODERATE",
    "cwe_ids": [
        "CWE-79"
    ],
    "github_reviewed": true,
    "nvd_published_at": "2021-08-13T17:15:00Z"
}

References

Affected packages

Packagist / miniorange/miniorange-saml

Package

Name: miniorange/miniorange-saml
Purl: pkg:composer/miniorange/miniorange-saml

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.4.3

Affected versions

1.*

1.1.2

1.2.0

1.2.3

1.3.0

1.3.1

1.3.2

1.3.3

1.4.0

1.4.1

1.4.2

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/08/GHSA-jj8r-p9f5-fmvv/GHSA-jj8r-p9f5-fmvv.json"