CVE-2024-13265 | HackTesting

Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') vulnerability in Drupal Opigno Learning path allows PHP Local File Inclusion.This issue affects Opigno Learning path: from 0.0.0 before 3.1.2.

Credits

Marcin Grabias

catch

Axel Minck

Yuriy Korzhov

Andrii Aleksandrov

Yurii Boichenko

Greg Knaddison

References

https://www.drupal.org/sa-contrib-2024-029