AIKIDO-2026-72729
drupal/miniorange_saml is vulnerable to Improper certificate validation
95
Critical Risk
This Affects:
drupal/miniorange_samlTL;DR
A security vulnerability in the Drupal SAML module allows attackers who can intercept or redirect outbound network traffic to impersonate trusted remote services. The module does not properly validate TLS certificates for outbound HTTPS requests, potentially allowing attackers to influence communications with external services. Exploitation requires the attacker to be able to intercept or redirect traffic originating from the Drupal site.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range.
Background info
drupal/miniorange_saml is vulnerable to Improper certificate validation in versions 0.0.1 - 3.1.4.
How to fix this
Upgrade the drupal/miniorange_saml library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.