Skip to content
OpenAdvisories
Low · 1.8 CVE-2024-22477 EUVD-2024-20021GHSA-8wcf-q4vh-rh5h

PingFederate OIDC Policy Management Editor Cross-Site Scripting

Published Jul 9, 2024 · Updated Aug 1, 2024 · Assigned by Ping Identity

Vendor: Ping Identity Product: PingFederate

Description

A cross-site scripting vulnerability exists in the admin console OIDC Policy Management Editor. The impact is contained to admin console users only.

Affected products

VendorProductAffectedFixed
Ping Identity PingFederate 11.0.0 – ≤ 11.0.9, 11.1.0 – ≤ 11.1.9, 11.2.0 – ≤ 11.2.8, 11.3.0 – ≤ 11.3.4, 12.0.0, 10.3.0 – ≤ 10.3.13 —

References