Project:
Date:
2022-March-09
Vulnerability:
Access bypass
Affected versions:
<3.0.1
Description:
This module is used as part of the Opigno LMS distribution and implements learning paths for the LMS.
The module was providing too much user information about users such as the list of groups a uid is in.
Solution:
Install the latest version:
- If you use the opigno_learning_path module for Drupal 9.x, upgrade to 3.0.1 opigno_learning_path 3.0.1
Reported By:
Fixed By:
