Vulnerability details
CVE-2024-13265
Drupal Opigno Learning path
Opigno Learning path - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-029
CVSS 3.1
7.5High
Official description
Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') vulnerability in Drupal Opigno Learning path allows PHP Local File Inclusion.This issue affects Opigno Learning path: from 0.0.0 before 3.1.2.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 7.5High | 3.1 | CISA ADP / Vulnrichment (CISA-ADP) | CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Drupal | Opigno Learning path | v < 3.1.2 | CVEProject cvelistV5 (CNA) |
References and advisories
1
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2025-01-09
- Last updated
- 2025-01-14
- State
- Published
- Assigner (CNA)
- drupal
Exploit prediction (EPSS)
0.57%
Probability of exploitation in 30 days
47.5%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- No
- Exploitation
- None
- Technical impact
- Total
Weaknesses (CWE)
- CWE-96Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')