← CVE Intelligence

CVE-2024-21832

PingFederate REST API Data Store Injection PUBLISHED

Description (CNA)

A potential JSON injection attack vector exists in PingFederate REST API data stores using the POST method and a JSON request body.

Affected (CNA)

Vendor / productVersions
Ping Identity / PingFederateaffected 11.0.0 through 11.0.9; affected 11.1.0 through 11.1.9; affected 11.2.0 through 11.2.8; affected 11.3.0 through 11.3.4; affected 12.0.0

CWE

CWE-94

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.