Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability has been found in openBI up to 1.0.8 and classified as critical. This vulnerability affects the function uploadIcon of the file /application/index/controller/Icon.php. The manipulation of the argument image leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-252310 is the identifier assigned to this vulnerability.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2024-1035, CVE-2024-1036 — the unpatched zero-days are a reminder that the echo chamber swells while the vulnerabilities sit. The commits were flagged months ago. The patch notes vanished in the noise. If you are reading this, you already know. 🔐
Post summary
The post merely references the existence of CVE-2024-1035 and CVE-2024-1036 as unpatched zero‑days without providing further technical or remedial details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openbi_project | openbi | - | - | - |