Skip to content
OpenAdvisories
Low · 2.1 CVE-2025-21085 EUVD-2025-18342GHSA-4755-93r4-qvxj

PingFederate OAuth Grant attribute duplication may use excessive memory

Published Jun 15, 2025 · Updated Jun 16, 2025 · Assigned by Ping Identity

Vendor: Ping Identity Product: PingFederate

Description

PingFederate OAuth2 grant duplication in PostgreSQL persistent storage allows OAuth2 requests to use excessive memory utilization.

Affected products

VendorProductAffectedFixed
Ping Identity PingFederate 12.2.0 – < 12.2.4, 12.1.0 – < 12.1.9, 12.0 – < 12.0.9, 11.3.0 – < 11.3.13 12.2.4

References