CVE-2021-31583

Affected software: Sipwise C5 NGCP WWW Admin (NGCP CE 3.0 era; also NGCP www_admin 3.6.7). Description and connected sources document multiple authenticated stored and reflected XSS vulnerabilities arising when input to several scripts/parameters is not properly sanitized. Confirmed vulnerable lo...

CVE-2024-28344

An Open Redirect vulnerability exists in the Sipwise C5 NGCP Dashboard in versions prior to mr11.5.1 . The flaw allows an attacker to control the back parameter in a URL by using a double encoded URL , potentially redirecting users to unintended locations. To remediate this, users should update t...

CVE-2021-31584

CVE-2021-31584 affects Sipwise C5 NGCP CSC; CSRF allows performing actions with administrative privileges via the www_csc interface for versions up to CE mr3.8.13 (3.6.4). Documented impacts include cross-site requests made by authenticated users to admin endpoints; exploit information exists (CS...

CVE-2024-28345

The Sipwise C5 NGCP Dashboard versions prior to mr11.5.1 are vulnerable to an issue that allows a low-privileged user to access the Journal endpoint by directly visiting the URL. To resolve this, users should update to version mr11.5.1 or later . A temporary workaround involves restricting access...