CVE-2023-4884 Multiple vulnerabilities in Open5GS

An attacker could send an HTTP request to an Open5GS endpoint and retrieve the information stored on the device due to the lack of Authentication...

CVE-2023-4884

CVE-2023-4884 affects the Open5GS implementation (Open5GS 2.4.10 and earlier) where missing authentication allows a remote attacker to send an HTTP request to an Open5GS endpoint and retrieve information stored on the device. The root cause is an access-control/authentication flaw in the Open5GS ...