CVE-2026-5343

{"id": "CVE-2026-5343", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-5343", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-05-29T18:38:28.307589Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.4, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 2.2}]}, "affected": [{"source": "mlhess@drupal.org", "affectedData": [{"repo": "https://git.drupalcode.org/project/miniorange_saml", "vendor": "Drupal", "product": "SAML SSO - Service Provider", "versions": [{"status": "affected", "version": "0.0.0", "lessThan": "3.1.4", "versionType": "semver"}], "collectionURL": "https://www.drupal.org/project/miniorange_saml", "defaultStatus": "unaffected"}]}], "published": "2026-05-28T23:16:44.520", "references": [{"url": "https://www.drupal.org/sa-contrib-2026-031", "tags": ["Vendor Advisory"], "source": "mlhess@drupal.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "mlhess@drupal.org", "description": [{"lang": "en", "value": "CWE-754"}]}], "descriptions": [{"lang": "en", "value": "Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal SAML SSO - Service Provider allows Privilege Escalation.\n\nThis issue affects SAML SSO - Service Provider: from 0.0.0 before 3.1.4."}, {"lang": "es", "value": "La vulnerabilidad de 'Improper Check for Unusual or Exceptional Conditions' en Drupal SAML SSO - Service Provider permite la escalada de privilegios.\n\nEste problema afecta a SAML SSO - Service Provider: desde la versi\u00f3n 0.0.0 anterior a la 3.1.4."}], "lastModified": "2026-07-21T10:10:00.103", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:*:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "C6F52B9A-3CFE-466F-A234-164246498A37", "versionEndExcluding": "3.1.4", "versionStartIncluding": "3.0.1"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-1.0:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "84285C85-DA43-4E22-B037-E386D9F1278B"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-1.1:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "A217C5B5-0FD8-4AD1-932A-EACD0392F6A4"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-1.2:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "AE11E8A3-B5BB-4937-8B57-630E64E42AE5"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-1.3:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "D23AA5C4-A6AE-4AA2-82B8-DF3AA0FF04D6"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-1.4:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "DF86737D-3CAD-44E9-B071-E81C7FC1CF01"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-1.5:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "C2E647DD-FCF7-4E66-822B-8B80010C5D08"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-1.6:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "9078C79B-5A2F-4A7C-A8D5-3DB9496BD935"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-1.7:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "2C7BD10D-4D5A-4570-893A-6ED20A6D0901"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-1.8:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "8AECFEA3-9D8C-4255-9B51-E352620F1EA2"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-1.9:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "D447F116-3078-4C45-B2DE-2CE1AF527EAB"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-1.91:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "5B610F53-4CA8-4871-ABB6-748924CAAADB"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-1.92:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "A5709CAD-064C-4E3D-9851-F2B5659AB779"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-1.93:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "B6C89604-FC97-42B2-9768-E9CA843303C0"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-1.94:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "81AB4FDD-0AB7-4ADA-BE5D-29DAFA89AED8"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-1.95:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "9158E6F7-B368-4D4D-941D-24FE1CF4C469"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-1.96:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "55E46423-A251-46BC-8390-E9B96B0C9999"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-1.97:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "9116503B-159E-45CE-AC5B-9DCC6FBA2F55"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-1.98:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "BCE0965A-307A-481F-AE89-3D59ACB89587"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-1.99:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "BAD4936D-A79B-4C0D-AC57-05A6CB550368"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-1.991:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "0DB94412-B773-46DD-A30A-B17B18279FF9"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-1.992:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "740A7FA8-562D-4F1E-A88F-0425B15C96B1"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-1.993:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "A499A397-6C64-45E4-AE5E-4EB8E70AC0F5"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-1.994:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "BEDB2E6B-66E4-4C56-B838-E67070C3E415"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-1.995:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "4A0528F0-9033-4E86-92EF-AEC3CFBEBE4B"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-2.0:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "407D66FF-2DAA-4508-BEBC-381E689E9584"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-2.1:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "B054CF40-DBE3-4D24-BF0D-DCDD6A398493"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-2.2:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "30136A1D-2253-46E5-9487-2CC862854AFA"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-2.3:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "F445C5E5-8EE3-4169-AD4B-DAD3F4CF2F5E"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-2.4:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "47613A3A-88F5-40D0-B601-67F28C2FA6FA"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-2.5:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "853ECB89-56FE-47EB-97A9-F0F3D45DEB70"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-2.51:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "83B7C3E3-362B-48A2-9529-38B4A5A30383"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-2.52:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "98F5FE3F-446F-44D4-8A9C-254C425F7B9E"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-2.53:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "FE593D34-2523-443F-884F-AB9F70BDA8B6"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-2.54:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "58AB1D59-B200-4A40-81B8-93DABFADE728"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-2.55:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "BDF488FE-0D7F-4FC3-AACA-C3EBA95467BB"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-2.56:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "69BF5026-7266-4DE8-8C3D-2DD587E94F83"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-2.60:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "8FB34EA2-CEE6-4BCD-8CA0-1ACE01303972"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-2.61:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "1CD65BCA-FA32-4B29-8ABC-DDD6E5F5F983"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-2.70:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "D622AC8B-9C93-4980-9ED7-FB44AB85D053"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-2.71:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "63130FF1-60A0-4A9F-ACED-749E30E150AE"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:7.x-2.72:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "86DAA1E4-A7C4-4E8D-BAAC-EA29D0830645"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-1.0:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "624524CC-7E86-4399-9D07-42A62B8DE86E"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-1.1:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "0261A511-1FE4-4FED-A585-008D30B14BD6"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-1.2:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "8843F860-4870-4401-89E4-EF3B03C1FC76"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-1.3:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "AA1F8D0E-1456-4F72-9A23-D9694472F6CC"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-1.4:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "CB400C08-920F-4164-B370-17731952492B"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-1.5:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "EF010763-BC6C-4FC7-BD4E-972520493670"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-1.6:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "90079A7B-4EA8-4E92-A9E7-EE083D064D55"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-1.7:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "5B9FBE9C-AB62-43C8-8909-B028E9906031"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-1.8:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "9B46E4C7-3C88-46D3-9DAA-47AD4C93491C"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-1.9:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "1982052F-853F-444D-A00E-D80A40048CA7"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-1.10:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "72204C78-006C-4E3B-850D-FB752D82F8A8"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-1.11:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "50CFB922-DE38-483D-899E-57E068BE2907"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-1.12:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "F7082734-DCE0-4E86-BB04-D564FE389E9B"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-1.121:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "E13D9239-F933-4551-A75E-E8B27B3F6E19"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-1.122:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "8C9F4CC7-8E97-4760-94F7-F958AB1757F9"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-2.0:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "99FA10EB-189D-463B-A3F5-DC9696ACAC02"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-2.1:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "BDDF6A07-C809-42FB-8F0D-309AB75E878A"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-2.11:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "2522FA4B-CE2A-4400-ACFA-9149B2C761FC"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-2.12:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "ACAF856A-7A89-4F4C-BABA-438294EDD065"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-2.13:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "E63DEF35-CE9F-4FAF-B120-1C3E798BA839"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-2.14:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "2340C0C5-F37A-4412-8571-CECAC5A8FEA8"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-2.15:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "065C2669-52AB-4852-92B6-EF79E3CDB75B"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-2.16:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "CC0025F1-3A5E-44BD-A7B2-5603A5AAC751"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-2.17:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "F9822AF6-0821-45C9-BAB5-E0A33A525857"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-2.18:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "9D363A34-FB03-4B57-BD85-761986741353"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-2.19:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "FB3F72BF-5BD2-48BF-B42E-2FF9E649C22E"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-2.20:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "3BC649B6-F649-4C99-9737-4DDFF07734DF"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-2.21:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "3158F7E5-2657-4842-A255-DE7899FE387D"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-2.22:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "B2656DB3-7F25-484B-9F78-FE9A00619DC2"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-2.23:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "AC3A9AF8-538D-4E86-BDFB-4517A531AA92"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-2.24:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "0931AC5F-8D6E-426E-B7CC-B00B490AB305"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-2.25:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "280E6981-783C-4395-9A37-1D82A617B78B"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-2.26:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "8ED53809-CB59-403B-B0A5-CB6985AC64EC"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-2.27:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "EB67935B-EB59-4EB1-849B-0DAA9C71A6D9"}, {"criteria": "cpe:2.3:a:miniorange:saml_sso_-_service_provider:8.x-2.28:*:*:*:*:drupal:*:*", "vulnerable": true, "matchCriteriaId": "0DC0D68D-893F-47B9-9AC8-1109ED5F524B"}], "operator": "OR"}]}], "sourceIdentifier": "mlhess@drupal.org"}