github.com/free5gc/pcf vulnerabilities (Go)
5 vulnerabilities.
-
github.com/free5gc/pcfGo free5GC: PCF npcf-policyauthorization POST /app-sessions panics on suppFeat=1 with missing AfRoutReq via nil pointer dereference 6.5 Medium -
github.com/free5gc/pcfGo free5GC: PCF npcf-smpolicycontrol POST /sm-policies panics on downstream UDR/OpenAPI 404 via nil pointer dereference 7.5 High -
github.com/free5gc/pcfGo free5GC: PCF Npcf_SMPolicyControl missing authentication middleware allows unauthenticated access to SM policy handlers and disclosure of subscriber SUPI 8.2 High -
github.com/free5gc/pcfGo free5GC PCF: Memory Leak via CORS Middleware Registration in HTTP Handler Leads to Denial of Service 7.5 High -
github.com/free5gc/pcfGo Free5GC is vulnerable to DoS through its Npcf_BDTPolicyControl POST API 6.5 Medium