Skip to content
fr Sign in
7.3 High

CVE-2024-1035 A vulnerability has been found in openBI up to 1.0.8 and classified as critical

Description

A vulnerability has been found in openBI up to 1.0.8 and classified as critical. This vulnerability affects the function uploadIcon of the file /application/index/controller/Icon.php. The manipulation of the argument image leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-252310 is the identifier assigned to this vulnerability.

Affected products and versions

Product Affected versions Fixed in
openBI 1.0 1.0.0 → 1.0.8 No fix stated
openbi 1.0 earliest → 1.0.8 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of openBI

The 11 CVEs of openBI →
CVE-2024-1198 A vulnerability, which was classified as critical, was found in openBI up to 6.0.3 6.3 Medium CVE-2024-1117 A vulnerability was found in openBI up to 1.0.8 7.3 High CVE-2024-1116 A vulnerability was found in openBI up to 1.0.8 7.3 High CVE-2024-1115 A vulnerability was found in openBI up to 1.0.8 and classified as critical 7.3 High
Track this CVE