CVE-2024-1113

CVE-2024-1113 affects openBI up to v1.0.8, targeting the uploadUnity function in /application/index/controller/Unity.php. The root cause is manipulation of the file argument, enabling unrestricted remote file uploads. Multiple sources confirm the vulnerability and its public disclosure. A practic...