Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2025-60632

An issue was discovered in Free5GC v4.0.0 and v4.0.1 allowing an attacker to cause a denial of service via crafted POST request to the Npcf_BDTPolicyControl API.

VectorNETWORK

PublishedNov 24, 2025, 16:15

Published Bycve@mitre.org

Base Score

Score6.5

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

github.com/free5gc/pcf(Go)01.4.0N/A

References

https://github.com/free5gc/free5gc
https://github.com/free5gc/free5gc/issues/705

Weakness Type

CWE-617

CVSS Metrics

Base Score

6.5

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Base SeverityMedium

Version

3.1

Attack Vector (AV)

NETWORK