Unrated severityNVD Advisory· Published Dec 9, 2025· Updated Apr 7, 2026
OpenBMCS Cross Site Request Forgery (CSRF) via sendFeedback.php
CVE-2021-47702
Description
OpenBMCS 2.4 contains a CSRF vulnerability that allows attackers to perform actions with administrative privileges by exploiting the sendFeedback.php endpoint. Attackers can submit malicious requests to trigger unintended actions, such as sending emails or modifying system settings.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- OPEN BMCS/OpenBMCSv5Range: 2.4
Patches
Vulnerability mechanics
References
4- www.exploit-db.com/exploits/50667mitreexploit
- www.vulncheck.com/advisories/openbmcs-cross-site-request-forgery-csrf-via-sendfeedbackphpmitrethird-party-advisory
- www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5691.phpmitrethird-party-advisory
- www.openbmcs.commitreproduct
News mentions
0No linked articles in our index yet.