A vulnerability has been found in openBI up to 1.0.8 and classified as critical. This vulnerability affects the function uploadIcon of the file /application/index/controller/Icon.php. The manipulation of the argument image leads to unrestricted upload.

This vulnerability was named CVE-2024-1035. The attack can be initiated remotely. Furthermore, there is an exploit available.