{"schema_version":"1.7.3","id":"GHSA-3j9f-7w24-pcqg","published":"2025-11-24T18:31:12Z","modified":"2025-12-17T00:44:02.186511Z","aliases":["CVE-2025-60633","GO-2025-4162"],"summary":"Free5GC is vulnerable to DoS via the Nudm_SubscriberDataManagement API","details":"An issue was discovered in Free5GC v4.0.0 and v4.0.1 allowing an attacker to cause a denial of service via the Nudm_SubscriberDataManagement API.","affected":[{"package":{"name":"github.com/free5gc/udm","ecosystem":"Go","purl":"pkg:golang/github.com/free5gc/udm"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"last_affected":"1.4.0"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/11/GHSA-3j9f-7w24-pcqg/GHSA-3j9f-7w24-pcqg.json"}},{"package":{"name":"github.com/free5gc/openapi","ecosystem":"Go","purl":"pkg:golang/github.com/free5gc/openapi"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.2.2"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/11/GHSA-3j9f-7w24-pcqg/GHSA-3j9f-7w24-pcqg.json"}}],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-60633"},{"type":"WEB","url":"https://github.com/free5gc/free5gc/issues/700"},{"type":"WEB","url":"https://github.com/free5gc/free5gc/issues/701"},{"type":"WEB","url":"https://github.com/free5gc/free5gc/issues/702"},{"type":"WEB","url":"https://github.com/free5gc/free5gc/issues/703"},{"type":"WEB","url":"https://github.com/free5gc/openapi/pull/65"},{"type":"WEB","url":"https://github.com/free5gc/udm/pull/63"},{"type":"WEB","url":"https://github.com/free5gc/udm/pull/65"},{"type":"WEB","url":"https://github.com/free5gc/udm/pull/66"},{"type":"WEB","url":"https://github.com/free5gc/openapi/commit/d50c83e8fe7ebf9a62d9de99517e21a17f627b52"},{"type":"WEB","url":"https://github.com/free5gc/udm/commit/57c56a3ad4bc53a62cab259045e78ec9abdb98ca"},{"type":"WEB","url":"https://github.com/free5gc/udm/commit/ca9976857909a422dcff5bf2228756fc2bfc80d1"},{"type":"WEB","url":"https://github.com/free5gc/udm/commit/e776c42177817f75e75e7a587c58c2a027beed81"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-3j9f-7w24-pcqg"},{"type":"PACKAGE","url":"https://github.com/free5gc/pcf"}],"database_specific":{"cwe_ids":["CWE-1287"],"github_reviewed":true,"github_reviewed_at":"2025-11-25T21:40:56Z","nvd_published_at":"2025-11-24T16:15:50Z","severity":"MODERATE"},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}]}