CVE-2025-60632

Description

Free5GC is vulnerable to DoS through its Npcf_BDTPolicyControl POST API in github.com/free5gc/pcf

Affected packages (2)

• Go/github.com/free5gc/pcffrom 0, < 1.4.0
• Go/github.com/free5gc/pcffrom 0, < 1.4.0

CVSS scores

References (6)

• ADVISORYhttps://github.com/advisories/GHSA-vgq7-9r5r-j9v3
• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2025-60632
• PATCHhttps://github.com/free5gc/pcf
• WEBhttps://github.com/free5gc/free5gc
• WEBhttps://github.com/free5gc/free5gc/issues/705
• WEBhttps://github.com/free5gc/pcf/pull/53