Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpvulndbHarsh TiwariWPVDB-ID:BE21F355-0E5B-4AD7-9D8F-85E9A0101DDC
HistoryJan 06, 2023 - 12:00 a.m.

miniOrange WordPress SAML SSO Standard < 16.0.8 - Open Redirect in SSO login

2023-01-0600:00:00
Harsh Tiwari
wpscan.com
18
wordpress
saml
sso
open redirect
vulnerability

EPSS

0.001

Percentile

31.5%

JSON

The plugin does not validate that the redirect parameter to its SSO login endpoint points to an internal site URL, making it vulnerable to an Open Redirect issue when the user is already logged in

Related

cve 1
cvelist 1
wpvulndb 2
prion 1
nvd 1
cve
cve
CVE-2022-4496
2023-01-30 21:15:10
cvelist
cvelist
CVE-2022-4496 miniOrange WordPress SAML SSO multiple versions - Open Redirect in SSO login
2023-01-30 20:31:36
wpvulndb
wpvulndb
miniOrange WordPress SAML SSO Premium < 12.1.0 - Open Redirect in SSO login
2023-01-06 00:00:00
miniOrange WordPress SAML SSO Premium Multisite < 20.0.7 - Open Redirect in SSO login
2023-01-06 00:00:00
prion
prion
Open redirect
2023-01-30 21:15:00
nvd
nvd
CVE-2022-4496
2023-01-30 21:15:10

EPSS

0.001

Percentile

31.5%

JSON
Related for WPVDB-ID:BE21F355-0E5B-4AD7-9D8F-85E9A0101DDC
cve1cvelist1wpvulndb2prion1nvd1