CVE-2018-25084 – Ping Identity Self-Service Account Manager SSAMController.java cross site scripting

https://notcve.org/view.php?id=CVE-2018-25084

A vulnerability, which was classified as problematic, has been found in Ping Identity Self-Service Account Manager 1.1.2. Affected by this issue is some unknown functionality of the file src/main/java/com/unboundid/webapp/ssam/SSAMController.java. The manipulation leads to cross site scripting. The attack may be launched remotely. Upgrading to version 1.1.3 is able to address this issue. • https://github.com/pingidentity/ssam/commit/f64b10d63bb19ca2228b0c2d561a1a6e5a3bf251 https://github.com/pingidentity/ssam/releases/tag/ssam-1.1.3 https://vuldb.com/?ctiid.225362 https://vuldb.com/?id.225362 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •