CVE-2024-13265
Opigno Learning path - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-029
概要
Opigno Learning path - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-029
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') vulnerability in Drupal Opigno Learning path allows PHP Local File Inclusion.This issue affects Opigno Learning path: from 0.0.0 before 3.1.2.
影響パッケージ
Packagist:https://packages.drupal.org/8
drupal/opigno_learning_path
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.2"}],"database_specific":{"constraint":"<3.1.2"}}]
参照URL
- advisory github.com
- advisory nvd.nist.gov
- web drupal.org
- web git.drupalcode.org
- web drupal.org