medium6.4
CVE-2022-40724
The PingFederate Local Identity Profiles '/pf/idprofile.ping' endpoint is vulnerable to Cross-Site Request Forgery (CSRF) through crafted GET requests.
Impact
The PingFederate Local Identity Profiles '/pf/idprofile.ping' endpoint is vulnerable to Cross-Site Request Forgery (CSRF) through crafted GET requests.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pingidentity | Pingfederate | from 10.3.0 through 10.3.11 from 11.0.0 through 11.0.6 from 11.1.0 through 11.1.5 from 11.2.0 through 11.2.2 |