Vulnerability · Published Dec 9, 2025 · Assigned by VulnCheck

CVE-2021-47703OpenBMCS Server Side Request Forgery (SSRF) via /php/query.php

Medium 6.9

In plain English

A medium-severity server-side request forgery in OpenBMCS from OPEN BMCS. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 25% of all known vulnerabilities).

Severity (CVSS 4.0)6.9Medium

Exploit odds (30 days)0.3%top 74.8% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

OpenBMCS 2.4 contains an unauthenticated SSRF vulnerability that allows attackers to bypass firewalls and initiate service and network enumeration on the internal network through the affected application, allowing hijacking of current sessions. Attackers can specify an external domain in the 'ip' parameter to force the application to make an HTTP request to an arbitrary destination host.

Affected products (as reported)

Vendor	Product	Versions
OPEN BMCS	OpenBMCS	2.4

Weakness: CWE-918 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:L/SI:L/SA:L

References

ExploitDB-50670 exploit
Official Product Homepage product
Zero Science Lab Disclosure (ZSL-2022-5694) third-party-advisory
VulnCheck Advisory: OpenBMCS Server Side Request Forgery (SSRF) via /php/query.php third-party-advisory