CVE Tools
Sign in
Back to feed

One slug, seven editions: the miniOrange SAML SSO bug that let anyone log in as your WordPress admin

Patchstack·By Dave Jong··12 min read


SAML Single Sign On

Authentication Bypass

Reported by the DigitalOcean security team, with root cause analysis by DigitalOcean, coverage and vendor follow-up handled jointly with Patchstack.

Most vulnerability write-ups are about the bug. This is primarily about everything around the bug, where the actual risk ended up living.…

Continue reading on Patchstack

Related coverage

Other stories on the same CVEs
No other coverage for these CVEs yet.
Worried this affects your company?

See what your business actually exposes to the Internet — a free external review, no install, no obligation.

Check my exposure