CVE-2021-47718 — OpenBMCS Directory Listing Information Disclosure
OpenBMCS 2.4 contains an information disclosure vulnerability that allows unauthenticated attackers to access sensitive files by exploiting directory listing functionality. Atta…
Published: 2025-12-09 · CVSS: 8.7 · CVSS 4.0
OpenBMCS 2.4 contains an information disclosure vulnerability that allows unauthenticated attackers to access sensitive files by exploiting directory listing functionality. Attackers can browse directories like /debug/ and /php/ to discover configuration files, database credentials, and system information.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7