CVE-2026-87945

Name of the Vulnerable Software and Affected Versions Drupal SAML SSO - Service Provider versions 0.0.0 through 3.2.0

Description The miniorange saml module does not sufficiently validate certain user-supplied URLs before performing redirects. This allows an attacker to redirect users to an external, untrusted website after authentication, which can be used to fake the source of data, facilitate phishing attacks, or increase the credibility of malicious links.

Recommendations Update Drupal SAML SSO - Service Provider to a version later than 3.2.0.