CVE-2021-36786: Miniorange SAML

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

The miniorange_saml (aka Miniorange Saml) extension before 1.4.3 for TYPO3 allows Sensitive Data Exposure of API credentials and private keys.

Affected products

• Miniorange SAML: before 1.4.3 (fixed in 1.4.3)

Published 2021-08-13. Last modified 2026-06-17.