CVE-2024-13264

Published: Jan 9, 2025Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') vulnerability in Drupal Opigno module allows PHP Local File Inclusion.This issue affects Opigno module: from 0.0.0 before 3.1.2.

Affected (1)

Products: Opigno: Opigno Module

Opigno

1 product

Opigno Module

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Opigno Opigno Module	Before 3.1.2

Related CWEs

CWE-96

Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')

The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes code syntax before inserting the input into an executable resource, such as a library, configuration file, or template.

References (1)

https://www.drupal.org/sa-contrib-2024-028

Source: mlhess@drupal.org

Third Party Advisory

Timeline

No history available yet.