CVE-2024-13267

CVE-2024-13267: Opigno TinCan Question Type - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-031

Vendor Drupal

Product Opigno TinCan Question Type

Weakness CWE-96

Published January 9, 2025

Last update January 14, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') vulnerability in Drupal Opigno TinCan Question Type allows PHP Local File Inclusion.This issue affects Opigno TinCan Question Type: from 7.X-1.0 before 7.X-1.3.

Key dates

02Disclosure timeline

January 9, 2025 CVE published

January 14, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-13267 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/96.html