CVE-2024-13265
CVE-2024-13265 · Opigno Learning path - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-029
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') vulnerability in Drupal Opigno Learning path allows PHP Local File Inclusion.This issue affects Opigno Learning path: from 0.0.0 before 3.1.2.
CVSS 7.5 · High · EPSS 0.6% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
opigno learning path
- Versions
- ≥ 0.0.0, < 3.1.2: Affected (semver)
Update to 3.1.2
drupal/opigno_learning_path Packagist:https://packages.drupal.org/8
- Affected ranges
- ECOSYSTEM: < 3.1.2
Update to 3.1.2