CVE-2019-13564

CVE-2019-13564 is a Cross-Site Scripting (XSS) vulnerability in the Ping Identity Agentless Integration Kit prior to version 1.5. Several sources describe it as a Reflected XSS affecting the /as/authorization.oauth2 endpoint, caused by improper encoding of an arbitrarily submitted HTTP GET parame...