Junglewise Threat Intelligence
CVE-2026-3217: DRUPAL-CONTRIB-2026-018 - This module enables you to perform SAML protocol-based single sign-on (SSO) on a Drupal site. The module doesn't sufficiently sanitize user
CVE-2026-3217 · Severity: info · Published 2026-02-25
Technologies: Packagist:Https://Packages.Drupal.Org/8 Drupal/Miniorange Saml. Vendors: Packagist:Https://Packages.Drupal.Org/8.
Executive brief
This module enables you to perform SAML protocol-based single sign-on (SSO) on a Drupal site.
The module doesn't sufficiently sanitize user input, leading to a reflected Cross-site scripting (XSS) vulnerability.
Affected products
- packagist:https://packages.drupal.org/8 drupal/miniorange_saml