DRUPAL-CONTRIB-2019-047 - In certain configuration cases, when a learning path is configured as semi-private, anonymous users are allowed to join a learning path when

Severity: info · Published 2019-05-15

Technologies: Packagist:Https://Packages.Drupal.Org/8 Drupal/Opigno Learning Path. Vendors: Packagist:Https://Packages.Drupal.Org/8.

Executive brief

In certain configuration cases, when a learning path is configured as semi-private, anonymous users are allowed to join a learning path when they should not.

Affected products

packagist:https://packages.drupal.org/8 drupal/opigno_learning_path

Related threats

DRUPAL-CONTRIB-2024-029 - The Opigno Learning Path module enables you to manage group content. Administrative forms allow uploading malicious files which may contain
DRUPAL-CONTRIB-2022-029 - This module is used as part of the Opigno LMS distribution and implements learning paths for the LMS. The module was providing too much use
DRUPAL-CONTRIB-2021-018 - This project is related to Opigno LMS distribution. It implements the learning path, that combines together in a very flexible way the diffe