Security Advisory

CVE-2023-40148

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-04-10 00:03:31
Last updated 2024-08-12 15:09:02
Assigner Ping Identity
State PUBLISHED

Description

Server-side request forgery (SSRF) in PingFederate allows unauthenticated http requests to attack network resources and consume server-side resources via forged HTTP POST requests.