CVE-2024-1033

OpenBI up to version 1.0.8 contains a vulnerability in the function agent of /application/index/controller/Datament.php. Manipulating the api argument leads to information disclosure, and the issue can be exploited remotely. Public exploit information is available. No fixed version is documented ...

CVE-2024-1035

openBI up to 1.0.8 is affected by a critical vulnerability in the uploadIcon function located at /application/index/controller/Icon.php. The image argument manipulation allows unrestricted file upload via a remote attack, and the exploit has been publicly disclosed (VDB-252310). Various sources c...

CVE-2024-1034

OpenBI up to version 1.0.8 is affected by a vulnerability in the uploadFile function of /application/index/controller/File.php that allows unrestricted file upload. The issue enables remote initiation and payload delivery, with public exploits disclosed. Multiple sources (NVD, Red Hat, CVE lists,...

CVE-2024-1032

CVE-2024-1032 concerns openBI up to v1.0.8, where the vulnerable component is the Test Connection Handler’s function testConnection in /application/index/controller/Databasesource.php. The issue is a deserialization vulnerability that can be exploited remotely, with public disclosure of the explo...