CVE-2024-23983 – Access rules for PingAccess may be circumvented with URL-encoded characters

https://notcve.org/view.php?id=CVE-2024-23983

11 Nov 2024 — Improper handling of canonical URL-encoding may lead to bypass not properly constrained by request rules. • https://docs.pingidentity.com/pingaccess/latest/release_notes/pa_811_rn.html • CWE-20: Improper Input Validation CWE-177: Improper Handling of URL Encoding (Hex Encoding) •