Adrian Tuchel

**Name of the Vulnerable Software and Affected Versions** Sipwise C5 NGCP Dashboard versions prior to mr11.5.1 **Description** An Open Redirect issue was found, allowing attackers to control the `back` parameter in the URL through a double encoded URL. This enables attackers to redirect users to unintended locations. **Recommendations** For versions prior to mr11.5.1, update to version mr11.5.1 or later to resolve the issue. As a temporary workaround, consider restricting user access to the vulnerable URL parameter `back` to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Sipwise C5 NGCP Dashboard versions prior to mr11.5.1 **Description** An issue in Sipwise C5 NGCP Dashboard allows a low-privileged user to access the "Journal endpoint" by directly visiting the URL. **Recommendations** For versions prior to mr11.5.1, update to version mr11.5.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the Journal endpoint until a patch is available.