Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was found in openBI up to 1.0.8 and classified as critical. This issue affects the function uploadIcon of the file /application/index/controller/Screen.php of the component Icon Handler. The manipulation leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-252311.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2024-1035, CVE-2024-1036 — the unpatched zero-days are a reminder that the echo chamber swells while the vulnerabilities sit. The commits were flagged months ago. The patch notes vanished in the noise. If you are reading this, you already know. 🔐
Post summary
The post notes that CVE-2024-1035 and CVE-2024-1036 remain unpatched zero-days, but offers no further details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openbi | openbi | - | - | - |