{"action":"Upgrade github.com/free5gc/udm to 1.2.0 or later.","affected":[{"fixed":"1.2.0","introduced":"0"}],"component":"github.com/free5gc/udm","cve_ids":["CVE-2023-46324"],"ecosystem":"Go","epss":0.00503,"exploited":false,"fixed_versions":["1.2.0"],"ghsa_id":"GHSA-cqvv-r3g3-26rf","id":"tcs_01M5KF7RCAEERC7QGKZ66AT1DJ","modified_at":"2023-11-08T04:13:42.359663Z","published_at":"2023-10-23T03:30:30Z","references":["https://osv.dev/vulnerability/GHSA-cqvv-r3g3-26rf","https://nvd.nist.gov/vuln/detail/CVE-2023-46324","https://github.com/free5gc/udm/pull/20","https://github.com/free5gc/udm/commit/5e1479cc686f058992557669b13fd3761a1b6024","https://github.com/free5gc/udm","https://github.com/free5gc/udm/compare/v1.1.1...v1.2.0","https://www.gsma.com/security/wp-content/uploads/2023/10/0073-invalid_curve.pdf"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-cqvv-r3g3-26rf","url":"https://osv.dev/vulnerability/GHSA-cqvv-r3g3-26rf"}],"summary":"free5GC udm vulnerable to Invalid Curve Attack"}