Threats tagged 'ghsa-x3q3-9p69-qvgq'

A denial of service vulnerability exists in Open5GS up to version 2.7.7 in the function amf_namf_comm_handle_registration_status_update_request. The flaw is triggered by manipulating the ueContextId argument in the /namf-comm/v1/ue-contexts/{ueContextId}/transfer-update endpoint. This vulnerability can be exploited remotely and public exploit code is available. The Open5GS project has been informed but has not yet responded or issued a fix.