Static Code Injection Vulnerability in Drupal Opigno TinCan Question Type
CVE-2024-13267

Currently unrated

Key Information:

Vendor

Drupal
Vendor
CVE Published:
9 January 2025

What is CVE-2024-13267?

The Opigno TinCan Question Type for Drupal contains a Static Code Injection vulnerability that allows attackers to exploit improperly neutralized directives. This vulnerability enables PHP Local File Inclusion, which could lead to unauthorized access to sensitive files within the server. It specifically affects versions prior to 7.X-1.3, making it essential for users to upgrade to the latest version to mitigate potential security risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://www.drupal.org/sa-contrib-2024-031

Timeline

  • Vulnerability published

JSON
.