Skip to content
OpenAdvisories

Package · Go

github.com/free5gc/free5gc

6 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.3

    free5GC: NRF nnrf-nfm lacks NF Profile input validation — enables NF Registration Poisoning with arbitrary service endpoints

    free5GC is an open-source implementation of the 5G core network. In 4.2.2 and earlier, the NRF RegisterNFInstance handler at PUT /nnrf-nfm/v1/nf-instances/{nfInstanceID} accepts NF Profiles without enforcing UUID format, nfStatus enum values, heartBeatTimer r…