HIGH🇵🇱 Wersja polska

CVE-2024-13265

CVSS 7.5v3.1pub. 2025-01-09upd. 2025-08-27

Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') vulnerability in Drupal Opigno Learning path allows PHP Local File Inclusion.This issue affects Opigno Learning path: from 0.0.0 before 3.1.2.

CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

  • Opigno Learning Path

    APP
    Opigno
    < 3.1.2
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2024-13264CRITICAL9.8PL ✓ten sam vendor

Static Code Injection umożliwiający PHP Local File Inclusion w Drupal Opigno Module

CVE-2024-13267HIGH7.5ten sam vendor

Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') vulnerability in Drup...

CVE-2024-13263MEDIUM5.5ten sam vendor

Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') vulnerability in Drup...

CVE-2024-13268MEDIUM6.8ten sam vendor

Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') vulnerability in Drup...