PT-2025-2086 · Opigno · Opigno Tincan Question Type

Axel Minck + 5 · CVE-2024-13267 · Published 2025-01-09 · Updated 2025-08-27

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Opigno TinCan Question Type versions 7.X-1.0 through 7.X-1.2

Description The issue is related to improper neutralization of directives in statically saved code, also known as 'Static Code Injection', which allows PHP Local File Inclusion. This can potentially be exploited to access sensitive files on the server.

Recommendations For Opigno TinCan Question Type versions 7.X-1.0 through 7.X-1.2, update to version 7.X-1.3 or later to resolve the issue.

Exploit

Fix

Weakness Enumeration

CWE-96

Related Identifiers

CVE-2024-13267

Affected Products

Opigno Tincan Question Type

References · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/13xxx/CVE-2024-13267.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-13267 · Security Note
• https://osv.dev/vulnerability/CVE-2024-13267 · Vendor Advisory
• https://twitter.com/CVEnew/status/1877620696161071252 · Twitter Post
• https://git.drupalcode.org/project/opigno_tincan_question_type · Note
• https://drupal.org/sa-contrib-2024-031 · Note
• https://t.me/cveNotify/133759 · Telegram Post
• https://drupal.org/project/opigno_tincan_question_type · Note