HIGH🇵🇱 Wersja polska

CVE-2024-13267

CVSS 7.5v3.1pub. 2025-01-09upd. 2025-08-27

Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') vulnerability in Drupal Opigno TinCan Question Type allows PHP Local File Inclusion.This issue affects Opigno TinCan Question Type: from 7.X-1.0 before 7.X-1.3.

CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

  • Opigno Tincan Question Type

    APP
    Opigno
    7.x-1.0 – 7.x-1.3 (bez)
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2024-13264CRITICAL9.8PL ✓ten sam vendor

Static Code Injection umożliwiający PHP Local File Inclusion w Drupal Opigno Module

CVE-2024-13265HIGH7.5ten sam vendor

Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') vulnerability in Drup...

CVE-2024-13263MEDIUM5.5ten sam vendor

Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') vulnerability in Drup...

CVE-2024-13268MEDIUM6.8ten sam vendor

Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') vulnerability in Drup...