Pegasystems · Pega Platform · CVE-2022-35656
**Name of the Vulnerable Software and Affected Versions**
Pega Platform versions 8.3 through 8.7.3
**Description**
The issue may allow authenticated security administrators to alter CSRF settings directly.
**Recommendations**
For Pega Platform versions 8.3 through 8.7.3, consider restricting access to CSRF settings for authenticated security administrators until a fix is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.