Description
Ping Identity PingFederate before 10.3.1 mishandles pre-parsing validation, leading to an XXE attack that can achieve XML file disclosure.
Unscored
CVE-2021-41770
EUVD-2021-28778GHSA-rpvm-9qg3-rjh7
Ping Identity PingFederate before 10.3.1 mishandles pre-parsing validation, leading to an XXE attack that can achieve XML file disclosure.
Published Oct 7, 2021 · Updated Aug 4, 2024 · Assigned by Ping Identity