Approved changes feed: RSS · Atom

cpe:2.3:a:openbi_project:openbi:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOpenbi Project (75d825d4-dd73-51d2-af1e-45367b6c6adc)
ProductOpenbi (cd6c37b2-daed-52bf-9d2c-e1d24a4c7ff2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-1035 vulnerable 2026-06-08 06:25:39.038206 openBI Icon.php uploadIcon unrestricted upload
HIGH (7.3)
A vulnerability has been found in openBI up to 1.0.8 and classified as critical. This vulnerability affects the function uploadIcon of the file /application/index/controller/Icon.php. The manipulation of the argument image leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-252310 is the identifier assigned to this vulnerability.
Published: 2024-01-30T16:00:07.279Z
Updated: 2024-08-23T19:33:45.891Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-1034 vulnerable 2026-06-08 06:25:39.035315 openBI File.php uploadFile unrestricted upload
HIGH (7.3)
A vulnerability, which was classified as critical, was found in openBI up to 1.0.8. This affects the function uploadFile of the file /application/index/controller/File.php. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-252309 was assigned to this vulnerability.
Published: 2024-01-30T14:31:05.379Z
Updated: 2024-11-12T20:39:27.678Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-1033 vulnerable 2026-06-08 06:25:39.034686 openBI Datament.php agent information disclosure
MEDIUM (4.3)
A vulnerability, which was classified as problematic, has been found in openBI up to 1.0.8. Affected by this issue is the function agent of the file /application/index/controller/Datament.php. The manipulation of the argument api leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-252308.
Published: 2024-01-30T14:00:09.769Z
Updated: 2025-05-29T15:05:25.559Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-1032 vulnerable 2026-06-08 06:25:39.034083 openBI Test Connection Databasesource.php testConnection deserialization
HIGH (7.3)
A vulnerability classified as critical was found in openBI up to 1.0.8. Affected by this vulnerability is the function testConnection of the file /application/index/controller/Databasesource.php of the component Test Connection Handler. The manipulation leads to deserialization. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-252307.
Published: 2024-01-30T13:31:05.697Z
Updated: 2024-08-27T20:30:58.534Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.