HIGH🇬🇧 English

CVE-2024-13265

CVSS 7.5v3.1pub. 2025-01-09upd. 2025-08-27

Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') vulnerability in Drupal Opigno Learning path allows PHP Local File Inclusion.This issue affects Opigno Learning path: from 0.0.0 before 3.1.2.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

  • Opigno Learning Path

    APP
    Opigno
    < 3.1.2
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2024-13264CRITICAL9.8PL ✓ten sam vendor

Static Code Injection umożliwiający PHP Local File Inclusion w Drupal Opigno Module

CVE-2024-13267HIGH7.5ten sam vendor

Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') vulnerability in Drup...

CVE-2024-13263MEDIUM5.5ten sam vendor

Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') vulnerability in Drup...

CVE-2024-13268MEDIUM6.8ten sam vendor

Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') vulnerability in Drup...