CVE-2024-1032

Published: Jan 30, 2024Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

A vulnerability classified as critical was found in openBI up to 1.0.8. Affected by this vulnerability is the function testConnection of the file /application/index/controller/Databasesource.php of the component Test Connection Handler. The manipulation leads to deserialization. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-252307.

Affected (1)

Products: Openbi Project: Openbi

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Openbi Project Openbi	Up to 1.0.8

Related CWEs

Deserialization of Untrusted Data

The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

References (6)

https://note.zhaoj.in/share/6ISYe2urjlkI

Source: cna@vuldb.com

Broken Link

https://vuldb.com/?ctiid.252307

Source: cna@vuldb.com

Permissions Required

https://vuldb.com/?id.252307

Source: cna@vuldb.com

Permissions Required

https://note.zhaoj.in/share/6ISYe2urjlkI

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

https://vuldb.com/?ctiid.252307

Source: af854a3a-2127-422b-91ae-364da2661108

Permissions Required

https://vuldb.com/?id.252307

Source: af854a3a-2127-422b-91ae-364da2661108

Permissions Required

Timeline

No history available yet.