Drupal SAML SSO - Service Provider vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Drupal SAML SSO - Service Provider: 2 record(s), with affected versions and fixes.
CVE-2026-5343
High · 7.4
CWE-754 May 28, 2026
SAML SSO - Service Provider - Critical - Authentication bypass - SA-CONTRIB-2026-031
Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal SAML SSO - Service Provider allows Privilege Escalation.
This issue affects SAML SSO - Service Provider: from 0.0.0 before 3.1.4.
CVE-2026-3217
Medium · 6.1
CWE-79 Mar 25, 2026
SAML SSO - Service Provider - Critical - Cross-site scripting - SA-CONTRIB-2026-018
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal SAML SSO - Service Provider allows Cross-Site Scripting (XSS).This issue affects SAML SSO - Service Provider: from 0.0.0 before 3.1.3.