CVE-2021-47702 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

OpenBMCS 2.4 contains a CSRF vulnerability that allows attackers to perform actions with administrative privileges by exploiting the sendFeedback.php endpoint.…
Medium CVSS: 5.3

CVE-2021-47702

OpenBMCS 2.4 contains a CSRF vulnerability that allows attackers to perform actions with administrative privileges by exploiting the sendFeedback.php endpoint. Attackers can submit malicious requests to trigger unintended actions, such as sending emails or modifying system settings.
Vendor
Openbmcs
Product
Openbmcs
CWE
CWE-352
Yayın Tarihi
2025-12-09 21:15:48
Güncelleme
2025-12-19 19:40:24
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-

Kategoriler

CWE-352 Openbmcs MEDIUM Openbmcs 2025

Referanslar

https://www.exploit-db.com/exploits/50667 https://www.openbmcs.com https://www.vulncheck.com/advisories/openbmcs-cross-site-request-forgery-csrf-via-sendfeedbackphp https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5691.php