Project: 
Opigno Learning path
Date: 
2019-May-15
Security risk: 
Moderately critical 10∕25 AC:Basic/A:User/CI:Some/II:None/E:Theoretical/TD:Default
Vulnerability: 
Access bypass
Affected versions: 
<1.4.0
Description: 

In certain configuration cases, when a learning path is configured as semi-private, anonymous users are allowed to join a learning path when they should not.

Solution: 

Install the latest version:

Also see the Opigno Learning path project page.

Reported By: 
Fixed By: 
Coordinated By: