← Database

CVE-2022-40724

MEDIUM CVSS: 6.4 Published: 2023-04-25 Modified: 2026-06-17

Description

The PingFederate Local Identity Profiles '/pf/idprofile.ping' endpoint is vulnerable to Cross-Site Request Forgery (CSRF) through crafted GET requests.

Affected Platforms

Pingidentity Pingfederate

Weakness Type

CWE-352, CWE-352

References