WordPress SAML Single Sign On – SSO Login plugin <= 5.0.4 - Broken Access Control vulnerability
CVE-2023-41873

4.3MEDIUM

Key Information:

Vendor

WordPress
Status
Saml Sp Single Sign On
Vendor
CVE Published:
13 December 2024

What is CVE-2023-41873?

The identified vulnerability in miniOrange SAML SP Single Sign On relates to missing authorization protocols, allowing an attacker to exploit incorrectly configured access control security levels. This flaw could lead to unauthorized access to sensitive areas of the application, affecting all versions up to 5.0.4. Organizations using this authentication method should assess their configurations to prevent potential security breaches and protect their data integrity.

Affected Version(s)

SAML SP Single Sign On <= 5.0.4

References

https://patchstack.com/database/wordpress/plugin/minioran...
vdb-entry

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Abdi Pranata (Patchstack Alliance)
.