CVE-2024-1114

EUVD-2024-16888
A vulnerability has been found in openBI up to 1.0.8 and classified as critical. This vulnerability affects the function dlfile of the file /application/index/controller/Screen.php. The manipulation of the argument fileUrl leads to improper access controls. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-252472.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.5 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: 10%
Affected Products (NVD)
VendorProductVersion
openbiopenbi
𝑥
≤ 1.0.8
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
openbiopenbi
𝑥
≤ 1.0.8
ADP
Common Weakness Enumeration
References
https://note.zhaoj.in/share/9wv48TygKRxo
https://vuldb.com/?ctiid.252472
https://vuldb.com/?id.252472
https://note.zhaoj.in/share/9wv48TygKRxo
https://vuldb.com/?ctiid.252472
https://vuldb.com/?id.252472