Vulnerability in Drupal Opigno Learning Path

CVE-2024-13265

Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') vulnerability in Drupal Opigno Learning path allows PHP Local File Inclusion.This issue affects Opigno Learning path: from 0.0.0 before 3.1.2.

EPSS: 0.002 (40.2th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

Public proof-of-concept exploits

References

Frequently asked questions

What is CVE-2024-13265?
CVE-2024-13265 is a vulnerability in Drupal Opigno Learning Path, classified under Improper Neutralization of Directives in Statically Saved Code (Static Code Injection). Published 2025-01-09.
Is CVE-2024-13265 known to be exploited?
1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.