漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
free5GC has Improper Input Validation in UDM, Leading to Information Exposure
Vulnerability Description
free5gc UDM provides Unified Data Management (UDM) for free5GC, an open-source project for 5th generation (5G) mobile core networks. In versions up to and including 1.4.1, remote attackers can inject control characters (e.g., %00) into the ueId parameter, triggering internal URL parsing errors (net/url: invalid control character). This exposes system implementation details and can aid in service fingerprinting. All deployments of free5GC using the UDM Nudm_UECM service may be affected. free5gc/udm pull request 76 contains a fix for the issue. No direct workaround is available at the application level. Applying the official patch is recommended.
CVSS Information
N/A
Vulnerability Type
输入验证不恰当
Vulnerability Title
free5gc UDM 安全漏洞
Vulnerability Description
free5gc UDM是free5GC开源的一个5G移动核心网络的核心网元。 free5gc UDM 1.4.1及之前版本存在安全漏洞，该漏洞源于远程攻击者可将控制字符注入ueId参数，触发内部URL解析错误，可能暴露系统实现细节并有助于服务指纹识别。
CVSS Information
N/A
Vulnerability Type
N/A