CVE-2024-28344

An Open Redirect vulnerability exists in the Sipwise C5 NGCP Dashboard in versions prior to mr11.5.1 . The flaw allows an attacker to control the back parameter in a URL by using a double encoded URL , potentially redirecting users to unintended locations. To remediate this, users should update t...

CVE-2024-28345

The Sipwise C5 NGCP Dashboard versions prior to mr11.5.1 are vulnerable to an issue that allows a low-privileged user to access the Journal endpoint by directly visiting the URL. To resolve this, users should update to version mr11.5.1 or later . A temporary workaround involves restricting access...