github.com/free5gc/smf vulnerabilities (Go)
3 vulnerabilities.
-
github.com/free5gc/smfGo free5GC: SMF UPI management interface lacks auth middleware; unauthenticated topology read/write requests reach handlers 10.0 Critical -
github.com/free5gc/smfGo free5GC: SMF UPI DELETE /upi/v1/upNodesLinks/{ref} panics on AN-node deletion via nil UPF dereference; unauthenticated, state-mutating 8.2 High -
github.com/free5gc/smfGo free5GC: SMF UPI POST /upi/v1/upNodesLinks exits the SMF process on overlapping UE pools (unauthenticated, reachable Fatalf) 7.5 High