Headline
CVE-2021-40329: Ping Identity Documentation Portal
The Authentication API in Ping Identity PingFederate before 10.3 mishandles certain aspects of external password management.
Related news
CVE-2021-25959: WhiteSource Vulnerability Database
In OpenCRX, versions v4.0.0 through v5.1.0 are vulnerable to reflected Cross-site Scripting (XSS), due to unsanitized parameters in the password reset functionality. This allows execution of external javascript files on any user of the openCRX instance.