A vulnerability was found in openBI up to 1.0.8 and classified as critical. This issue affects the function uploadIcon of the file /application/index/controller/Screen.php of the component Icon Handler. The manipulation leads to unrestricted upload.

The identification of this vulnerability is CVE-2024-1036. The attack may be initiated remotely. Furthermore, there is an exploit available.