Description
openBI是一款大数据可视化平台，提供数据分析与展示功能。openBI的Upload.php接口存在任意文件上传漏洞，攻击者可以利用该漏洞上传恶意文件到服务器，可能导致服务器被入侵或数据泄露。
openBI /plugins/upload 文件上传漏洞（CVE-2024-1116）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2024-1116
https://vuldb.com/?id.252474
https://github.com/advisories/GHSA-2hpw-wm7x-857p
https://cve.imfht.com/detail/CVE-2024-1116
https://www.cnvd.org.cn/flaw/show/CNVD-2024-09299
https://avd.aquasec.com/nvd/2024/cve-2024-1116/
https://www.sentinelone.com/vulnerability-database/cve-2024-1116/
http://sxxdckj.com/cms/a/openBI-Upload-php-wen-jian-ren-yi-wen-jian-shang-chuan-lou-dong.html