Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: Opigno Clear all filters
TI-2024-12312 CVE-2024-13268 · GHSA-g9ph-4g63-c54q

Opigno - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-032

Priority LOW 33

Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') vulnerability in Drupal Opigno allows PHP Local File Inclusion.This issue affects Opigno: from 7.X-1.0 before 7.X-1.23.

CVSS 3.1MEDIUM 6.8 Network Low privileges No interaction EPSS 0.00474 Published 2025-01-09 Fixed in 7.x-1.23 CWE-96
TI-2024-12311 CVE-2024-13267 · GHSA-gpgg-3g65-72cm

Opigno TinCan Question Type - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-031

Priority LOW 36

Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') vulnerability in Drupal Opigno TinCan Question Type allows PHP Local File Inclusion.This issue affects Opigno TinCan Question Type:…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00574 Published 2025-01-09 Fixed in 7.x-1.3 CWE-96
TI-2024-12309 CVE-2024-13265 · GHSA-2rx4-vrv5-3mjp

Opigno Learning path - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-029

Priority LOW 36

Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') vulnerability in Drupal Opigno Learning path allows PHP Local File Inclusion.This issue affects Opigno Learning path: from 0.0.0 be…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00574 Published 2025-01-09 Fixed in 3.1.2 CWE-96
TI-2024-12308 CVE-2024-13264 · GHSA-99h6-9pr2-5g94

Opigno module - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-028

Priority MEDIUM 49

Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') vulnerability in Drupal Opigno module allows PHP Local File Inclusion.This issue affects Opigno module: from 0.0.0 before 3.1.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00474 Published 2025-01-09 Fixed in 3.1.2 CWE-96
TI-2024-12307 CVE-2024-13263 · GHSA-6j67-4cmx-rgw8

Opigno group manager - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-027

Priority LOW 26

Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') vulnerability in Drupal Opigno group manager allows PHP Local File Inclusion.This issue affects Opigno group manager: from 0.0.0 be…

CVSS 3.1MEDIUM 5.5 Network Low privileges User interaction EPSS 0.0027 Published 2025-01-09 Fixed in 3.1.1 CWE-96