CVE-2022-40724

Publication date

2023-04-25 00:00:00

Family

Ping Identity

State

PUBLISHED

Description

The PingFederate Local Identity Profiles /pf/idprofile.ping endpoint is vulnerable to Cross-Site Request Forgery (CSRF) through crafted GET requests.