CVE advisoryCRITICAL
CVE-2023-4659
Free5GC WebConsole Cross-Site Request Forgery Vulnerability
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A Cross-Site Request Forgery vulnerability exists in the free5gc webconsole that allows unauthenticated remote attackers to perform administrative actions, such as user management, by manipulating or omitting security tokens. This could enable unauthorized modification of users within the application.