A vulnerability, which was classified as critical, was found in openBI up to 1.0.8. This affects the function
uploadFile
of the file /application/index/controller/File.php. The manipulation leads to unrestricted upload.
This vulnerability is uniquely identified as CVE-2024-1034. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.