CVE-2022-34155: Miniorange OAuth Single Sign On

High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days.

Improper Authentication vulnerability in miniOrange OAuth Single Sign On – SSO (OAuth Client) plugin allows Authentication Bypass.This issue affects OAuth Single Sign On – SSO (OAuth Client): from n/a through 6.23.3.

Affected products

• Miniorange OAuth Single Sign On: before 6.23.4 (fixed in 6.23.4)

Published 2023-07-18. Last modified 2026-06-17.