CVE-2024-23983 – Access rules for PingAccess may be circumvented with URL-encoded characters

https://notcve.org/view.php?id=CVE-2024-23983

Improper handling of canonical URL-encoding may lead to bypass not properly constrained by request rules. • https://docs.pingidentity.com/pingaccess/latest/release_notes/pa_811_rn.html https://www.pingidentity.com/en/resources/downloads/pingaccess.html • CWE-20: Improper Input Validation CWE-177: Improper Handling of URL Encoding (Hex Encoding) •