Description
Unsanitized user-supplied data saved in the PingFederate Administrative Console could trigger the execution of JavaScript code in subsequent user processing.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ping Identity | PingFederate | 12.1.0 – ≤ 12.1.4, 12.0.0 – ≤ 12.0.6, 11.3.0 – ≤ 11.3.9, 11.2.0 – ≤ 11.2.10 | — |