7.3
High
CVE-2024-1034 A vulnerability, which was classified as critical, was found in openBI up to 1.0.8
Description
A vulnerability, which was classified as critical, was found in openBI up to 1.0.8. This affects the function uploadFile of the file /application/index/controller/File.php. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-252309 was assigned to this vulnerability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| openBI 1.0 | 1.0.0 → 1.0.8 | No fix stated |
References
- vuldb.com vuldb.com
- vuldb.com vuldb.com
- note.zhaoj.in note.zhaoj.in
Timeline
- Published
- Last modified
Other CVEs of openBI
The 11 CVEs of openBI →
CVE-2024-1198
A vulnerability, which was classified as critical, was found in openBI up to 6.0.3
6.3
Medium
CVE-2024-1117
A vulnerability was found in openBI up to 1.0.8
7.3
High
CVE-2024-1116
A vulnerability was found in openBI up to 1.0.8
7.3
High
CVE-2024-1115
A vulnerability was found in openBI up to 1.0.8 and classified as critical
7.3
High