Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

go

github.com/free5gc/nef

go

View on github.com · View on proxy.golang.org

Security Advisories for github.com/free5gc/nef in go

Critical
3 months ago

free5GC's NEF nnef-pfdmanagement API is unauthenticated; forged bearer tokens can read PFD data and create/delete PFD subscriptions GSA_kwCzR0hTQS1yd3d3LXg0NXctcDUyd84ABWgp

go github.com/free5gc/nef
Critical
3 months ago

free5GC's NEF nnef-oam route group is unauthenticated; no-token requests reach the OAM handler GSA_kwCzR0hTQS1jbXBqLTJ4M2ctbTdnM84ABWgm

go github.com/free5gc/nef
Critical
3 months ago

free5GC's NEF 3gpp-traffic-influence API is unauthenticated; missing or forged bearer tokens can create, read, patch, and delete subscriptions GSA_kwCzR0hTQS0zcDI4LTczcTctNDV4cM4ABWgl

go github.com/free5gc/nef
High
3 months ago

free5GC's NEF 3gpp-pfd-management PATCH applications/{appId} panics on UDR access failure due to nil ProblemDetails dereference GSA_kwCzR0hTQS1qNTlmLXgyODUtNjlqeM4ABWgh

go github.com/free5gc/nef
High
3 months ago

free5GC's NEF nnef-callback route group is unauthenticated; forged callback requests are accepted into the processing path GSA_kwCzR0hTQS13cWZoLWdxNzktajhtZs4ABWgf

go github.com/free5gc/nef
High
3 months ago

free5GC's NEF crashes via logger.Fatal on PFD notification delivery failure (attacker-controlled notifyUri) GSA_kwCzR0hTQS1yeHJxLWZ2NzYtMjZwcs4ABWge

go github.com/free5gc/nef
Critical
3 months ago

free5GC's NEF 3gpp-pfd-management API is unauthenticated; forged bearer tokens can create, read, and delete PFD transactions GSA_kwCzR0hTQS01ZjYyLTUzcjgtcXJxZs4ABWga

go github.com/free5gc/nef

Filter by Severity

Critical 4 High 3