CVE-2021-31584: Sipwise Next Generation Communication Platform

High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days.

Sipwise C5 NGCP www_csc version 3.6.4 up to and including platform NGCP CE mr3.8.13 allows call/click2dial CSRF attacks for actions with administrative privileges.

Affected products

• Sipwise Next Generation Communication Platform: version 3.6.4 only

Published 2021-04-23. Last modified 2026-06-17.