https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-1035.htmlhttps://patchthecve.com/cve/CVE-2024-1035.htmlWed, 17 Jun 2026 07:03:17 +0000HIGH 7.3: A vulnerability has been found in openBI up to 1.0.8 and classified as critical. This vulnerability affects the function uploadIcon of the file /application/index/controller/Icon.php. The manipulation of the argument image leads to unrestricted upload. The attack can be initiated remotely. The explohttps://patchthecve.com/cve/CVE-2024-1034.htmlhttps://patchthecve.com/cve/CVE-2024-1034.htmlWed, 17 Jun 2026 07:03:17 +0000HIGH 7.3: A vulnerability, which was classified as critical, was found in openBI up to 1.0.8. This affects the function uploadFile of the file /application/index/controller/File.php. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed thttps://patchthecve.com/cve/CVE-2024-1033.htmlhttps://patchthecve.com/cve/CVE-2024-1033.htmlWed, 17 Jun 2026 07:03:17 +0000MEDIUM 4.3: A vulnerability, which was classified as problematic, has been found in openBI up to 1.0.8. Affected by this issue is the function agent of the file /application/index/controller/Datament.php. The manipulation of the argument api leads to information disclosure. The attack may be launched remotely. https://patchthecve.com/cve/CVE-2024-1032.htmlhttps://patchthecve.com/cve/CVE-2024-1032.htmlWed, 17 Jun 2026 07:03:17 +0000HIGH 7.3: A vulnerability classified as critical was found in openBI up to 1.0.8. Affected by this vulnerability is the function testConnection of the file /application/index/controller/Databasesource.php of the component Test Connection Handler. The manipulation leads to deserialization. The attack can be la