CVE-2021-47718 - CVE House
Back to Database
Status published High CVE-2021-47718

OpenBMCS Directory Listing Information Disclosure

Vulnerability Description

OpenBMCS 2.4 contains an information disclosure vulnerability that allows unauthenticated attackers to access sensitive files by exploiting directory listing functionality. Attackers can browse directories like /debug/ and /php/ to discover configuration files, database credentials, and system information.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-47718

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • LiquidWorm as Gjoko Krstic of Zero Science Lab

References

More from OPEN BMCS

View All →
CVE-2021-47704
OpenBMCS SQL Injection via obix_test.php
High 8.7
CVE-2021-47703
OpenBMCS Server Side Request Forgery (SSRF) via /php/query.php
Medium 6.9
CVE-2021-47702
OpenBMCS Cross Site Request Forgery (CSRF) via sendFeedback.php
Medium 5.3
CVE-2021-47701
OpenBMCS User Management Privilege Escalation
High 8.7

Affected Vendor

Affected Software

OpenBMCS
Vulnerable Versions:
2.4

Timeline

Official Publish: December 9th, 2025
Last Modified: April 7th, 2026
Added to House: July 21st, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-548

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.