CVE-2026-5343
Estado: AnalizadaAlta (7.4)—
Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal SAML SSO - Service Provider allows Privilege Escalation.
This issue affects SAML SSO - Service Provider: from 0.0.0 before 3.1.4.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
- Puntuación base: 7.4
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.34%
- Percentil entre todas las CVEs puntuadas: 25
- Fecha de la puntuación: 4/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
🎯 Técnicas ATT&CK
Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.
- Explotación
T1190Exploit Public-Facing Applicationinitial access85 % - Impacto principal
T1068Exploitation for Privilege Escalationprivilege escalation80 % - Impacto secundario
T1078.004Cloud Accountsstealth · persistence · privilege escalation · initial access75 %
CVSS AV:N sin UI requiere exposición remota (T1190). CWE-754 en SAML SSO permite escalada de privilegios (T1068) y potencial impersonación de cuentas privilegiadas (T1078.004) por fallo en validación de condiciones.
Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.
🛡️ Mitigaciones ATT&CK que cubren estas técnicas
Tecnologías afectadas (1)
CWE
- CWE-754
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2026-5343",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2026-5343",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"version": "2.0.3",
"timestamp": "2026-05-29T18:38:28.307589Z"
}
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 7.4,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "HIGH",
"availabilityImpact": "NONE",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.2,
"exploitabilityScore": 2.2
}
]
},
"affected": [
{
"source": "mlhess@drupal.org",
"affectedData": [
{
"repo": "https://git.drupalcode.org/project/miniorange_saml",
"vendor": "Drupal",
"product": "SAML SSO - Service Provider",
"versions": [
{
"status": "affected",
"version": "0.0.0",
"lessThan": "3.1.4",
"versionType": "semver"
}
],
"collectionURL": "https://www.drupal.org/project/miniorange_saml",
"defaultStatus": "unaffected"
}
]
}
],
"published": "2026-05-28T23:16:44.520",
"references": [
{
"url": "https://www.drupal.org/sa-contrib-2026-031",
"tags": [
"Vendor Advisory"
],
"source": "mlhess@drupal.org"
}
],
"vulnStatus": "Analyzed",
"weaknesses": [
{
"type": "Secondary",
"source": "mlhess@drupal.org",
"description": [
{
"lang": "en",
"value": "CWE-754"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal SAML SSO - Service Provider allows Privilege Escalation.\n\nThis issue affects SAML SSO - Service Provider: from 0.0.0 before 3.1.4."
},
{
"lang": "es",
"value": "La vulnerabilidad de 'Improper Check for Unusual or Exceptional Conditions' en Drupal SAML SSO - Service Provider permite la escalada de privilegios.\n\nEste problema afecta a SAML SSO - Service Provider: desde la versión 0.0.0 anterior a la 3.1.4."
}
],
"lastModified": "2026-07-21T10:10:00.103",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:*:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "C6F52B9A-3CFE-466F-A234-164246498A37",
"versionEndExcluding": "3.1.4",
"versionStartIncluding": "3.0.1"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-1.0:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "84285C85-DA43-4E22-B037-E386D9F1278B"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-1.1:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "A217C5B5-0FD8-4AD1-932A-EACD0392F6A4"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-1.2:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "AE11E8A3-B5BB-4937-8B57-630E64E42AE5"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-1.3:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "D23AA5C4-A6AE-4AA2-82B8-DF3AA0FF04D6"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-1.4:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "DF86737D-3CAD-44E9-B071-E81C7FC1CF01"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-1.5:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "C2E647DD-FCF7-4E66-822B-8B80010C5D08"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-1.6:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "9078C79B-5A2F-4A7C-A8D5-3DB9496BD935"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-1.7:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "2C7BD10D-4D5A-4570-893A-6ED20A6D0901"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-1.8:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "8AECFEA3-9D8C-4255-9B51-E352620F1EA2"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-1.9:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "D447F116-3078-4C45-B2DE-2CE1AF527EAB"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-1.91:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "5B610F53-4CA8-4871-ABB6-748924CAAADB"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-1.92:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "A5709CAD-064C-4E3D-9851-F2B5659AB779"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-1.93:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "B6C89604-FC97-42B2-9768-E9CA843303C0"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-1.94:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "81AB4FDD-0AB7-4ADA-BE5D-29DAFA89AED8"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-1.95:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "9158E6F7-B368-4D4D-941D-24FE1CF4C469"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-1.96:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "55E46423-A251-46BC-8390-E9B96B0C9999"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-1.97:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "9116503B-159E-45CE-AC5B-9DCC6FBA2F55"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-1.98:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "BCE0965A-307A-481F-AE89-3D59ACB89587"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-1.99:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "BAD4936D-A79B-4C0D-AC57-05A6CB550368"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-1.991:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "0DB94412-B773-46DD-A30A-B17B18279FF9"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-1.992:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "740A7FA8-562D-4F1E-A88F-0425B15C96B1"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-1.993:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "A499A397-6C64-45E4-AE5E-4EB8E70AC0F5"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-1.994:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "BEDB2E6B-66E4-4C56-B838-E67070C3E415"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-1.995:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "4A0528F0-9033-4E86-92EF-AEC3CFBEBE4B"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-2.0:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "407D66FF-2DAA-4508-BEBC-381E689E9584"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-2.1:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "B054CF40-DBE3-4D24-BF0D-DCDD6A398493"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-2.2:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "30136A1D-2253-46E5-9487-2CC862854AFA"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-2.3:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "F445C5E5-8EE3-4169-AD4B-DAD3F4CF2F5E"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-2.4:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "47613A3A-88F5-40D0-B601-67F28C2FA6FA"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-2.5:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "853ECB89-56FE-47EB-97A9-F0F3D45DEB70"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-2.51:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "83B7C3E3-362B-48A2-9529-38B4A5A30383"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-2.52:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "98F5FE3F-446F-44D4-8A9C-254C425F7B9E"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-2.53:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "FE593D34-2523-443F-884F-AB9F70BDA8B6"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-2.54:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "58AB1D59-B200-4A40-81B8-93DABFADE728"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-2.55:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "BDF488FE-0D7F-4FC3-AACA-C3EBA95467BB"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-2.56:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "69BF5026-7266-4DE8-8C3D-2DD587E94F83"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-2.60:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "8FB34EA2-CEE6-4BCD-8CA0-1ACE01303972"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-2.61:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "1CD65BCA-FA32-4B29-8ABC-DDD6E5F5F983"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-2.70:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "D622AC8B-9C93-4980-9ED7-FB44AB85D053"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-2.71:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "63130FF1-60A0-4A9F-ACED-749E30E150AE"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-2.72:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "86DAA1E4-A7C4-4E8D-BAAC-EA29D0830645"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-1.0:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "624524CC-7E86-4399-9D07-42A62B8DE86E"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-1.1:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "0261A511-1FE4-4FED-A585-008D30B14BD6"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-1.2:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "8843F860-4870-4401-89E4-EF3B03C1FC76"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-1.3:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "AA1F8D0E-1456-4F72-9A23-D9694472F6CC"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-1.4:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "CB400C08-920F-4164-B370-17731952492B"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-1.5:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "EF010763-BC6C-4FC7-BD4E-972520493670"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-1.6:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "90079A7B-4EA8-4E92-A9E7-EE083D064D55"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-1.7:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "5B9FBE9C-AB62-43C8-8909-B028E9906031"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-1.8:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "9B46E4C7-3C88-46D3-9DAA-47AD4C93491C"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-1.9:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "1982052F-853F-444D-A00E-D80A40048CA7"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-1.10:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "72204C78-006C-4E3B-850D-FB752D82F8A8"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-1.11:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "50CFB922-DE38-483D-899E-57E068BE2907"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-1.12:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "F7082734-DCE0-4E86-BB04-D564FE389E9B"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-1.121:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "E13D9239-F933-4551-A75E-E8B27B3F6E19"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-1.122:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "8C9F4CC7-8E97-4760-94F7-F958AB1757F9"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-2.0:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "99FA10EB-189D-463B-A3F5-DC9696ACAC02"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-2.1:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "BDDF6A07-C809-42FB-8F0D-309AB75E878A"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-2.11:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "2522FA4B-CE2A-4400-ACFA-9149B2C761FC"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-2.12:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "ACAF856A-7A89-4F4C-BABA-438294EDD065"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-2.13:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "E63DEF35-CE9F-4FAF-B120-1C3E798BA839"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-2.14:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "2340C0C5-F37A-4412-8571-CECAC5A8FEA8"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-2.15:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "065C2669-52AB-4852-92B6-EF79E3CDB75B"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-2.16:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "CC0025F1-3A5E-44BD-A7B2-5603A5AAC751"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-2.17:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "F9822AF6-0821-45C9-BAB5-E0A33A525857"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-2.18:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "9D363A34-FB03-4B57-BD85-761986741353"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-2.19:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "FB3F72BF-5BD2-48BF-B42E-2FF9E649C22E"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-2.20:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "3BC649B6-F649-4C99-9737-4DDFF07734DF"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-2.21:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "3158F7E5-2657-4842-A255-DE7899FE387D"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-2.22:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "B2656DB3-7F25-484B-9F78-FE9A00619DC2"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-2.23:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "AC3A9AF8-538D-4E86-BDFB-4517A531AA92"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-2.24:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "0931AC5F-8D6E-426E-B7CC-B00B490AB305"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-2.25:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "280E6981-783C-4395-9A37-1D82A617B78B"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-2.26:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "8ED53809-CB59-403B-B0A5-CB6985AC64EC"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-2.27:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "EB67935B-EB59-4EB1-849B-0DAA9C71A6D9"
},
{
"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-2.28:*:*:*:*:drupal:*:*",
"vulnerable": true,
"matchCriteriaId": "0DC0D68D-893F-47B9-9AC8-1109ED5F524B"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "mlhess@drupal.org"
}