CNNVD-202512-1125 Information
Dec 09, 2025
cve
CNNVD ID
CNNVD-202512-1125
Related CVE
- CNNVD Published: 2025-12-09
Description (Chinese)
OpenBMCS是澳大利亚OpenBMCS公司的一个建筑管理和控制系统。 OpenBMCS 2.4版本存在跨站请求伪造漏洞，该漏洞源于sendFeedback.php端点存在跨站请求伪造问题，可能导致执行管理员操作。
Description (English)
OpenBMCS is a building management and control system of OpenBMCS, Australia. Version 2.4 of OpenBMCS contains a cross-site request forgery loophole, which stems from the problem of cross-site request forgery at the SendFeedback.php endpoint, which may lead to the operator ’ s operation.
Hazard Level
High
Vulnerability Type
跨站请求伪造
Affected Vendor
OpenBMCS
Published
2025-12-09
Last Modified
2026-02-24
References
https://www.vulncheck.com/advisories/openbmcs-cross-site-request-forgery-csrf-via-sendfeedbackphp https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5691.php https://www.exploit-db.com/exploits/50667 https://www.openbmcs.com https://access.redhat.com/security/cve/cve-2021-47702
Share on: