Mosaic5g Flexric vulnerabilities
- mosaic5g flexricFlexRIC v2.0.0 trusts the xapp_id field from E42 message payloads without binding it to the...7.5 High
- mosaic5g flexricFlexRIC v2.0.0 allows a single SCTP connection to bind multiple xapp_ids by sending multiple...8.2 High
- mosaic5g flexricFlexRIC v2.0.0 contains an authorization bypass in the iApp's xApp isolation mechanism. The...7.5 High
- mosaic5g flexricFlexRIC v2.0.0 uses a uint16_t counter for xapp_id assignment but stores the value in uint32_t...7.5 High
- mosaic5g flexricFlexRIC v2.0.0 crashes when the near-RT RIC receives a RIC_INDICATION message with a ran_func_id...7.5 High
- mosaic5g flexricFlexRIC v2.0.0 contains a reachable assertion in e2ap_create_pdu() triggered when ASN.1 PER...7.5 High
- mosaic5g flexricFlexRIC v2.0.0 contains a reachable assertion in e2ap_recv_sctp_msg() (src/lib/ep/e2ap_ep.c). The...7.5 High
- mosaic5g flexricFlexRIC v2.0.0 crashes when the iApp receives an E42_RIC_SUBSCRIPTION_REQUEST referencing a non...7.5 High