CVE-2021-47702
BaseFortify
Publication date: 2025-12-09
Last updated on: 2025-12-09
Assigner: VulnCheck
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| openbmcs | openbmcs | 2.4 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-352 | The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor. |
Attack-Flow Graph
AI Powered Q&A
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability can be detected by monitoring HTTP requests to the sendFeedback.php endpoint for unauthorized or suspicious POST requests that could be exploiting the CSRF flaw. Specifically, you can look for POST requests to /core/sendFeedback.php with unusual or unexpected parameters such as subject and message fields being submitted without proper CSRF tokens. Network monitoring tools or web server logs can be used to identify such requests. While no specific commands are provided, you can use tools like curl or tcpdump to capture and analyze traffic, or grep web server logs for POST requests to sendFeedback.php. For example, a command to check Apache logs might be: grep 'POST /core/sendFeedback.php' /var/log/apache2/access.log [1, 2, 4]
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation steps include restricting access to the sendFeedback.php endpoint to trusted users only, implementing CSRF protection mechanisms such as CSRF tokens to validate requests, and educating users to avoid visiting untrusted websites while logged into OpenBMCS. Additionally, monitoring and blocking suspicious requests targeting the vulnerable endpoint can help reduce risk. Since no vendor response or patch is indicated, applying web application firewall (WAF) rules to block forged requests and limiting administrative privileges can also mitigate exploitation. [1, 2, 4]
Can you explain this vulnerability to me?
This vulnerability is a Cross-Site Request Forgery (CSRF) in OpenBMCS 2.4 that allows attackers to perform actions with administrative privileges by exploiting the sendFeedback.php endpoint. Attackers can submit malicious requests that cause unintended actions such as sending emails or changing system settings.
How can this vulnerability impact me? :
The vulnerability can impact you by allowing attackers to perform unauthorized administrative actions on your system. This could lead to unauthorized emails being sent or critical system settings being modified without your consent, potentially disrupting operations or compromising system integrity.