PT-2024-10137 · Drupal · Print Anything+1

Drew Webber · Published 2024-12-04 · Updated 2025-01-14 · CVE-2024-13300

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Print Anything versions .

Description The issue is related to insufficient input validation in the Print Anything module of the Drupal CMS system. This can allow a remote attacker to execute arbitrary code. The problem affects all versions of Print Anything.

Recommendations For all versions of Print Anything, update to a version that includes the fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2025-00395

CVE-2024-13300

Affected Products

Drupal

Print Anything

References · 9

• https://bdu.fstec.ru/vul/2025-00395 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-13300 · Security Note
• https://drupal.org/sa-contrib-2024-066 · Note
• https://t.me/cvedetector/14940 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1877722715609583946 · Twitter Post
• https://twitter.com/bluepinksec/status/1877611504507220127 · Twitter Post
• https://twitter.com/CVEnew/status/1877620676011634824 · Twitter Post
• https://vuldb.com/?id.291068 · Note
• https://cert.kenet.or.ke/index.php/cve-2024-13300-drupal-print-anything-remote-code-execution-vulnerability · Note