Cross-Site Request Forgery in Free5Gc

CVE-2023-4659

What is CVE-2023-4659?

This vulnerability is a Cross-Site Request Forgery issue in Free5GC that can be exploited to perform unauthorized actions as an administrator. By manipulating the token value to 'admin', an attacker can execute various operations such as creating, deleting, or modifying users within the application. Additionally, freeform POST, GET, and DELETE requests can be made without any token, enabling unprivileged remote users to gain excessive control and potentially compromise the integrity of user accounts.

References