CVE-2022-40724 Information

Description

The PingFederate Local Identity Profiles ‘/pf/idprofile.ping’ endpoint is vulnerable to Cross-Site Request Forgery (CSRF) through crafted GET requests.

Reference

https://docs.pingidentity.com/r/en-us/pingfederate-110/fll1675188537050