Unrated severityNVD Advisory· Published Dec 9, 2025· Updated Apr 7, 2026
OpenBMCS Cross Site Request Forgery (CSRF) via sendFeedback.php
CVE-2021-47702
Description
OpenBMCS 2.4 contains a CSRF vulnerability that allows attackers to perform actions with administrative privileges by exploiting the sendFeedback.php endpoint. Attackers can submit malicious requests to trigger unintended actions, such as sending emails or modifying system settings.
Affected products
2- OPEN BMCS/OpenBMCSv5Range: 2.4
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- www.exploit-db.com/exploits/50667mitreexploit
- www.vulncheck.com/advisories/openbmcs-cross-site-request-forgery-csrf-via-sendfeedbackphpmitrethird-party-advisory
- www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5691.phpmitrethird-party-advisory
- www.openbmcs.commitreproduct
News mentions
0No linked articles in our index yet.