What is CVE-2024-13263?

CVE-2024-13263 is a vulnerability in Drupal Opigno Group Manager, classified under Improper Neutralization of Directives in Statically Saved Code (Static Code Injection). Published 2025-01-09.

Is CVE-2024-13263 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Drupal Opigno Group Manager

CVE-2024-13263

Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') vulnerability in Drupal Opigno group manager allows PHP Local File Inclusion.This issue affects Opigno group manager: from 0.0.0 before 3.1.1.

EPSS: 0.001 (30.0th percentile) — read the EPSS interpretation.

Affected products

Drupal Opigno Group Manager — versions 0.0.0

Weakness classification (CWE)

CWE-96 — Improper Neutralization of Directives in Statically Saved Code (Static Code Injection)

Public proof-of-concept exploits

fkie-cad/nvd-json-data-feeds

References

www.drupal.org/sa-contrib-2024-027

Frequently asked questions

What is CVE-2024-13263?: CVE-2024-13263 is a vulnerability in Drupal Opigno Group Manager, classified under Improper Neutralization of Directives in Statically Saved Code (Static Code Injection). Published 2025-01-09.
Is CVE-2024-13263 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.