An attacker could send an HTTP request to an Open5GS... · CVE-2023-4884 · GitHub Advisory Database · GitHub

An attacker could send an HTTP request to an Open5GS...

High severity Unreviewed Published Oct 3, 2023 to the GitHub Advisory Database • Updated Apr 4, 2024

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

An attacker could send an HTTP request to an Open5GS endpoint and retrieve the information stored on the device due to the lack of Authentication.

References

Published by the National Vulnerability Database

Oct 3, 2023

Published to the GitHub Advisory Database Oct 3, 2023

Last updated Apr 4, 2024