free5gc/pcf · Security
Free5GC is vulnerable to DoS through its Npcf_BDTPolicyControl POST API
- GHSA ID
- GHSA-vgq7-9r5r-j9v3
- CVE ID
- CVE-2025-60632
- Severity
- medium
- Published
- Updated
- CVSS
- 6.5 · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
- CVSS v3
- 6.5 · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Description
An issue was discovered in Free5GC v4.0.0 and v4.0.1 allowing an attacker to cause a denial of service via crafted POST request to the Npcf_BDTPolicyControl API.
CWEs
- CWE-617 · Reachable Assertion