CVE-2024-1198 | openBI up to 6.0.3 Phar User.php addxinzhi outimgurl deserialization

A vulnerability, which was classified as critical, was found in openBI up to 6.0.3. Affected is the function addxinzhi of the file application/controllers/User.php of the component Phar Handler. The manipulation of the argument outimgurl leads to deserialization.

This vulnerability is traded as CVE-2024-1198. It is possible to launch the attack remotely. Furthermore, there is an exploit available.