CVE-2024-13263

CVE-2024-13263: Opigno group manager - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-027

Vendor Drupal

Product Opigno group manager

Weakness CWE-96

Published January 9, 2025

Last update January 10, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') vulnerability in Drupal Opigno group manager allows PHP Local File Inclusion.This issue affects Opigno group manager: from 0.0.0 before 3.1.1.

Key dates

02Disclosure timeline

January 9, 2025 CVE published

January 10, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-13263 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/96.html