Lucene search
Harsh TiwariWPVDB-ID:E6C4C8C7-1DCD-45BF-8582-F12ACCCA6FACHistoryJan 06, 2023 - 12:00 a.m.
miniOrange WordPress SAML SSO Premium Multisite < 20.0.7 - Open Redirect in SSO login
2023-01-0600:00:00
Harsh Tiwari
wpscan.com
7
wordpress
saml
sso
open redirect
vulnerability
EPSS
0.001
Percentile
31.5%
The plugin does not validate that the redirect parameter to its SSO login endpoint points to an internal site URL, making it vulnerable to an Open Redirect issue when the user is already logged in.
Related
cve
cve
CVE-2022-4496
2023-01-30 21:15:10
cvelist
cvelist
wpvulndb
wpvulndb
miniOrange WordPress SAML SSO Standard < 16.0.8 - Open Redirect in SSO login
2023-01-06 00:00:00
miniOrange WordPress SAML SSO Premium < 12.1.0 - Open Redirect in SSO login
2023-01-06 00:00:00
prion
prion
Open redirect
2023-01-30 21:15:00
nvd
nvd
CVE-2022-4496
2023-01-30 21:15:10