Back to search
CVE-2021-47703
Published: Dec 9, 2025
Modified: Apr 7, 2026
PUBLISHED
Description
OpenBMCS 2.4 contains an unauthenticated SSRF vulnerability that allows attackers to bypass firewalls and initiate service and network enumeration on the internal network through the affected application, allowing hijacking of current sessions. Attackers can specify an external domain in the 'ip' parameter to force the application to make an HTTP request to an arbitrary destination host.
| Vendor | Product | Versions |
|---|---|---|
OPEN BMCS | OpenBMCS | affected 2.4 |
Weaknesses (CWE)
References
ExploitDB-50670
exploit
Official Product Homepage
product
Zero Science Lab Disclosure (ZSL-2022-5694)
third-party-advisory
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now