| Package | Affected versions | Patched versions |
|---|---|---|
| pingfederate | ≥ 10.3.0, ≤ 10.3.11≥ 11.0.0, ≤ 11.0.6≥ 11.1.0, ≤ 11.1.5≥ 11.2.0, ≤ 11.2.2 |
The PingFederate Local Identity Profiles '/pf/idprofile.ping' endpoint is vulnerable to Cross-Site Request Forgery (CSRF) through crafted GET requests.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free