github.com/free5gc/udr vulnerabilities (Go)
9 vulnerabilities.
-
github.com/free5gc/udrGo free5GC: UDR Improper ueId validation in free5GC EE subscription handlers allows arbitrary identifier persistence 6.9 Medium -
github.com/free5gc/udrGo free5GC: UDR nudr-dr DELETE amf-subscriptions panics on missing UE state via nil interface type assertion (single authenticated request) 6.5 Medium -
github.com/free5gc/udrGo free5GC: UDR nudr-dr DELETE amf-subscriptions panics on missing subsId when UE state exists (nil pointer dereference) 4.3 Medium -
github.com/free5gc/udrGo free5GC UDR: Fail-open handling in PolicyDataSubsToNotifyPost allows unintended subscription creation 6.9 Medium -
github.com/free5gc/udrGo free5gc UDR fail-open request handling in PolicyDataSubsToNotifySubsIdPut may allow unintended subscription updates after input errors 6.9 Medium -
github.com/free5gc/udrGo free5gc UDR improper path validation allows unauthenticated creation and modification of Traffic Influence Subscriptions 8.7 High -
github.com/free5gc/udrGo free5gc UDR improper path validation allows unauthenticated access to Traffic Influence Subscriptions 8.7 High -
github.com/free5gc/udrGo free5gc UDR improper path validation allows unauthenticated deletion of Traffic Influence Subscriptions 8.7 High -
github.com/free5gc/udrGo Free5GC: UDR nudr-dr influenceData/subs-to-notify leaks SUPI in error response body without authentication 7.5 High