CVE-2024-13265

CVE-2024-13265: Opigno Learning path - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-029

Vendor Drupal

Product Opigno Learning path

Weakness CWE-96

Published January 9, 2025

Last update January 14, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') vulnerability in Drupal Opigno Learning path allows PHP Local File Inclusion.This issue affects Opigno Learning path: from 0.0.0 before 3.1.2.

Key dates

02Disclosure timeline

January 9, 2025 CVE published

January 14, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-13265 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/96.html AskarLabs — CWE-96 write-up Improper Neutralization of Directives in Statically Included Code ('Static Code Injection')

Related vulnerabilities

04Related CVE

CVE-2024-13263 Opigno group manager - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-027 CVE-2024-13264 Opigno module - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-028 CVE-2024-13267 Opigno TinCan Question Type - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-031 CVE-2024-13268 Opigno - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-032 CVE-2025-7825 Schema Plugin For Divi, Gutenberg & Shortcodes <= 4.3.2 - Authenticated (Contributor+) Object Instantiation