Описание
OpenBMCS 2.4 contains a CSRF vulnerability that allows attackers to perform actions with administrative privileges by exploiting the sendFeedback.php endpoint. Attackers can submit malicious requests to trigger unintended actions, such as sending emails or modifying system settings.
Ссылки
- ExploitThird Party AdvisoryVDB Entry
- Product
- Third Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:openbmcs:openbmcs:2.4:*:*:*:*:*:*:*
EPSS
Процентиль: 14%
0.00046
Низкий
4.3 Medium
CVSS3
Дефекты
CWE-352
Связанные уязвимости
CVSS3: 4.3
github
2 месяца назад
OpenBMCS 2.4 contains a CSRF vulnerability that allows attackers to perform actions with administrative privileges by exploiting the sendFeedback.php endpoint. Attackers can submit malicious requests to trigger unintended actions, such as sending emails or modifying system settings.
EPSS
Процентиль: 14%
0.00046
Низкий
4.3 Medium
CVSS3
Дефекты
CWE-352