Description
A potential JSON injection attack vector exists in PingFederate REST API data stores using the POST method and a JSON request body.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ping Identity | PingFederate | 11.0.0 – ≤ 11.0.9, 11.1.0 – ≤ 11.1.9, 11.2.0 – ≤ 11.2.8, 11.3.0 – ≤ 11.3.4, 12.0.0 | — |