CVE-2024-13267CWE-96

Opigno TinCan Question Type - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-031

High · published January 9, 2025

CVSS v3.1
7.5
EPSS
1%
Percentile
46.6
In the wild
Unconfirmed
What it is

Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') vulnerability in Drupal Opigno TinCan Question Type allows PHP Local File Inclusion.This issue affects Opigno TinCan Question Type: from 7.X-1.0 before 7.X-1.3.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00574 · 46.6th percentile
Weakness
CWE-96 · Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')
Published
2025-01-09T19:17Z
EPSS history
Timeline
  • 09 JAN 19:17Z
    Opigno TinCan Question Type - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-031
    cvelistv5