What is CVE-2025-32736?
CVE-2025-32736 is a Cross-Site Request Forgery (CSRF) vulnerability discovered in the Administrative Console of PingFederate versions prior to 13.1. This weakness could allow unauthorized actions to be performed via specially crafted links triggered by administrators with active sessions.
Azərbaycanca: CVE-2025-32736, PingFederate-in 13.1 versiyasından əvvəlki İnzibati Konsolunda aşkar edilmiş Cross-Site Request Forgery (CSRF) zəifliyidir. Bu boşluq, aktiv sessiyaya malik administratorlar tərəfindən xüsusi hazırlanmış keçidlər vasitəsilə icazəsiz əməliyyatların icrasına imkan yarada bilər.
Related CVEs
link basis: same weakness class CWE-352
FAQ2
Which versions of PingFederate are affected by CVE-2025-32736?
CVE-2025-32736 affects PingFederate versions prior to 13.1.
What does an attacker need to exploit CVE-2025-32736?
An attacker needs an administrator with an active session to trigger a specially crafted link.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.