← Back

CVE-2026-5343

nvd nist
Published: May 28, 2026Modified: Jul 21, 2026

JSON object

Loading...
7.4
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Exploitability: 2.2 / Impact: 5.2
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal SAML SSO - Service Provider allows Privilege Escalation. This issue affects SAML SSO - Service Provider: from 0.0.0 before 3.1.4.

Affected (77)

1 product
Saml Sso Service Provider
Configuration A
77 vulnerable
Vulnerable SoftwareAffected Versions
Miniorange
From 3.0.1 to 3.1.4
Version 7.x-1.0
Version 7.x-1.1
Version 7.x-1.2
Version 7.x-1.3
Version 7.x-1.4
Version 7.x-1.5
Version 7.x-1.6
Version 7.x-1.7
Version 7.x-1.8
Version 7.x-1.91
Version 7.x-1.92
Version 7.x-1.93
Version 7.x-1.94
Version 7.x-1.95
Version 7.x-1.96
Version 7.x-1.97
Version 7.x-1.98
Version 7.x-1.991
Version 7.x-1.992
Version 7.x-1.993
Version 7.x-1.994
Version 7.x-1.995
Version 7.x-1.99
Version 7.x-1.9
Version 7.x-2.0
Version 7.x-2.1
Version 7.x-2.2
Version 7.x-2.3
Version 7.x-2.4
Version 7.x-2.51
Version 7.x-2.52
Version 7.x-2.53
Version 7.x-2.54
Version 7.x-2.55
Version 7.x-2.56
Version 7.x-2.5
Version 7.x-2.60
Version 7.x-2.61
Version 7.x-2.70
Version 7.x-2.71
Version 7.x-2.72
Version 8.x-1.0
Version 8.x-1.10
Version 8.x-1.11
Version 8.x-1.121
Version 8.x-1.122
Version 8.x-1.12
Version 8.x-1.1
Version 8.x-1.2
Version 8.x-1.3
Version 8.x-1.4
Version 8.x-1.5
Version 8.x-1.6
Version 8.x-1.7
Version 8.x-1.8
Version 8.x-1.9
Version 8.x-2.0
Version 8.x-2.11
Version 8.x-2.12
Version 8.x-2.13
Version 8.x-2.14
Version 8.x-2.15
Version 8.x-2.16
Version 8.x-2.17
Version 8.x-2.18
Version 8.x-2.19
Version 8.x-2.1
Version 8.x-2.20
Version 8.x-2.21
Version 8.x-2.22
Version 8.x-2.23
Version 8.x-2.24
Version 8.x-2.25
Version 8.x-2.26
Version 8.x-2.27
Version 8.x-2.28

References (1)

Source: mlhess@drupal.org
Vendor Advisory

Timeline

No history available yet.