Description
In certain configuration cases, when a learning path is configured as semi-private, anonymous users are allowed to join a learning path when they should not.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | drupal/opigno_learning_path | < 1.4.0 | 1.4.0 | DRUPAL-CONTRIB-2019-047 |