Lucene search
HistoryJul 09, 2024 - 11:15 p.m.
CVE-2024-21832
pingfederate
json injection
rest api
post method
security
cve-2024-21832
CVSS3
3.5
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N
EPSS
0
Percentile
9.2%
A potential JSON injection attack vector exists in PingFederate REST API data stores using the POST method and a JSON request body.
Related
cvelist
cvelist
CVE-2024-21832 PingFederate REST API Data Store Injection
2024-07-09 23:04:55
cve
cve
CVE-2024-21832
2024-07-09 23:15:10
vulnrichment
vulnrichment
CVE-2024-21832 PingFederate REST API Data Store Injection
2024-07-09 23:04:55
CVSS3
3.5
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N
EPSS
0
Percentile
9.2%
Related for NVD:CVE-2024-21832