Improper input validation in Ping Identity Pingaccess
CVE-2024-23983
Improper handling of canonical URL-encoding may lead to bypass not properly constrained by request rules.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.001 (29.3th percentile) — read the EPSS interpretation.
Affected products
- Ping Identity Pingaccess — versions 8.1.0, 8.0.0, 7.3.0