CVE-2023-4659 Cross-Site Request Forgery in Free5Gc

Cross-Site Request Forgery vulnerability, whose exploitation could allow an attacker to perform different actions on the platform as an administrator, simply by changing the token value to "admin". It is also possible to perform POST, GET and DELETE requests without any token value. Therefore, an...

CVE-2023-4659 Cross-Site Request Forgery in Free5Gc

Cross-Site Request Forgery vulnerability, whose exploitation could allow an attacker to perform different actions on the platform as an administrator, simply by changing the token value to "admin". It is also possible to perform POST, GET and DELETE requests without any token value. Therefore, an...

free5GC Cross-Site Request Forgery Vulnerability

free5GC is a 5th Generation 5G mobile core network open source project by free5GC open source. free5GC suffers from a cross-site request forgery vulnerability that stems from the presence of a cross-site request forgery CSRF vulnerability. An attacker can exploit this vulnerability to create,...

PT-2023-30105 · Free5Gc · Free5Gc

Name of the Vulnerable Software and Affected Versions: Free5Gc affected versions not specified Description: The issue is related to a Cross-Site Request Forgery vulnerability. This vulnerability could allow an attacker to perform different actions on the platform as an administrator by changing t...

GHSA-M74X-FXJH-3QH9 Free5gc vulnerable to uncontrolled resource consumption

In Free5gc v3.0.5, the AMF breaks due to malformed NAS messages...

Free5gc vulnerable to uncontrolled resource consumption

In Free5gc v3.0.5, the AMF breaks due to malformed NAS messages...

CVE-2022-38871

In Free5gc v3.0.5, the AMF breaks due to malformed NAS messages...

Design/Logic Flaw

In Free5gc v3.0.5, the AMF breaks due to malformed NAS messages...

CVE-2022-38871

In Free5gc v3.0.5, the AMF breaks due to malformed NAS messages...

CVE-2022-38871

In Free5gc v3.0.5, the AMF breaks due to malformed NAS messages...

PT-2022-24601 · Free5Gc · Free5Gc

Name of the Vulnerable Software and Affected Versions: Free5gc version 3.0.5 Description: The issue arises due to malformed NAS messages, causing the AMF to break. Recommendations: For Free5gc version 3.0.5, consider implementing input validation to handle malformed NAS messages properly until a...

CVE-2022-38871

CVE-2022-38871 affects Free5gc v3.0.5, where the AMF can break due to malformed NAS messages. The issue is limited to the AMF component and is described with a high impact on availability (CVE score 7.5, network attack vector, no privileges required). The provided documents consistently describe ...

CVE-2022-38871

In Free5gc v3.0.5, the AMF breaks due to malformed NAS messages...

GO-2022-1083 Panic on malformed messages in github.com/free5gc/aper

A malformed message can crash the free5gc/amf and free5gc/ngap decoders via an index-out-of-range panic in aper.GetBitString...

free5GC Denial of Service Vulnerability

free5GC is a 5th Generation 5G mobile core network open source project by free5GC. free5GC version 3.2.1 suffers from a denial of service vulnerability. The vulnerability stems from the program's failure to properly come out with the wrong NGAP message, which is exploited by attackers to crash th...

CVE-2022-38870

Free5gc v3.2.1 is vulnerable to Information disclosure...

Information disclosure

Free5gc v3.2.1 is vulnerable to Information disclosure...

Denial Of Service (DoS)

github.com/free5gc/free5gc is vulnerable to denial of service. The vulnerability exists due to a index-out-of-range panic in aper.GetBitString, allowing an attacker to crash the application through the AMF and NGAP decoders by providing a maliciously crafted NGAP message...

CVE-2022-38870

Free5gc v3.2.1 is vulnerable to Information disclosure...

free5GC 访问控制错误漏洞

free5GC is an open source project for 5th Generation 5G mobile core networks open sourced by free5GC. A security vulnerability exists in free5GC version v3.2.1, which stems from vulnerability to information leakage...