Description
An attacker could send an HTTP request to an Open5GS endpoint and retrieve the information stored on the device due to the lack of Authentication.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Open5GS | Open5GS | 2.4.10 and prior | — |
Medium · 6.5
CVE-2023-4884
EUVD-2023-54723GHSA-rpmg-pqrf-89p5
Multiple vulnerabilities in Open5GS
Published Oct 3, 2023 · Updated Sep 19, 2024 · Assigned by INCIBE