Free5gc vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Free5gc products: 76 record(s), with severity, exploitation and fixes.

Free5gc 59 Udm 8 Smf 7 Udr 4 Pcf 3 Go-upf 2 Amf 2 Nrf 2 Ausf 2 Webconsole 2 Chf 1 Open5Gc 1

Exploited only (KEV) →

CVE-2023-4659 Critical · 9.8 CWE-352 Oct 2, 2023

Cross-Site Request Forgery in Free5Gc

Cross-Site Request Forgery vulnerability, whose exploitation could allow an attacker to perform different actions on the platform as an administrator, simply by changing the token value to "admin". It is also possible to perform POST, GET and DELETE requests without any token value. Therefore, an unprivileged remote user is able to create, delete and modify users within theapplication.