PT-2024-22398 · Sipwise · Sipwise C5 Ngcp Dashboard

Adrian Tuchel · Published 2024-04-10 · Updated 2025-06-17 · CVE-2024-28344

Positive Technologies (AI Summary)

CVSS v3.1

3.1

Low

Base vector

AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Sipwise C5 NGCP Dashboard versions prior to mr11.5.1

Description An Open Redirect issue was found, allowing attackers to control the back parameter in the URL through a double encoded URL. This enables attackers to redirect users to unintended locations.

Recommendations For versions prior to mr11.5.1, update to version mr11.5.1 or later to resolve the issue. As a temporary workaround, consider restricting user access to the vulnerable URL parameter back to minimize the risk of exploitation.

Exploit

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2024-28344

Affected Products

Sipwise C5 Ngcp Dashboard

References · 6

• 🔥 https://securitycafe.ro/2024/03/21/cve-2024-28344-cve-2024-28345-in-sipwise-c5 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-28344 · Security Note
• https://osv.dev/vulnerability/CVE-2024-28344 · Vendor Advisory
• https://t.me/cvenotify/125974 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1778159994703135099 · Twitter Post
• https://t.me/cvenotify/125978 · Telegram Post