CVE-2024-1114

Summary

CVE-2024-1114 is a critical vulnerability affecting openBI versions up to 1.0.8. The issue lies in the function dlfile of the controller Screen.php's /application/index directory. Manipulation of the fileUrl argument results in improper access controls, enabling remote attackers to gain unauthorized access. This vulnerability, identified as VDB-252472, has been publicly disclosed, increasing the risk of exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.