Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Vendor: Openbi Clear all filters
TI-2024-01113 CVE-2024-1198 · GHSA-25c3-4v7x-3hrp

openBI Phar User.php addxinzhi deserialization

Priority MEDIUM 43

A vulnerability, which was classified as critical, was found in openBI up to 6.0.3.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00731 Published 2024-02-02 No fix listed CWE-502
TI-2024-01035 CVE-2024-1117 · GHSA-m866-467g-64fm

openBI Screen.php index code injection

Priority MEDIUM 49

A vulnerability was found in openBI up to 1.0.8.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00743 Published 2024-01-31 No fix listed CWE-94
TI-2024-01034 CVE-2024-1116 · GHSA-2hpw-wm7x-857p

openBI Upload.php index unrestricted upload

Priority MEDIUM 49

A vulnerability was found in openBI up to 1.0.8.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00769 Published 2024-01-31 No fix listed CWE-434
TI-2024-01033 CVE-2024-1115 · GHSA-p969-49ff-hx55

openBI Setting.php dlfile os command injection

Priority MEDIUM 52

A vulnerability was found in openBI up to 1.0.8 and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0187 Published 2024-01-31 No fix listed CWE-78
TI-2024-01032 CVE-2024-1114 · GHSA-jhv9-m6q4-wc38

openBI Screen.php dlfile access control

Priority MEDIUM 50

A vulnerability has been found in openBI up to 1.0.8 and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00856 Published 2024-01-31 No fix listed CWE-284
TI-2024-01031 CVE-2024-1113 · GHSA-5h2x-6j9f-vr5g

openBI Unity.php uploadUnity unrestricted upload

Priority HIGH 82

A vulnerability, which was classified as critical, was found in openBI up to 1.0.8.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00634 Published 2024-01-31 No fix listed CWE-434