DRUPAL-CONTRIB-2021-018

Import Source

https://github.com/DrupalSecurityTeam/drupal-advisory-database/blob/main/advisories/opigno_learning_path/DRUPAL-CONTRIB-2021-018.json

JSON Data

https://api.osv.dev/v1/vulns/DRUPAL-CONTRIB-2021-018

Published

2021-06-23T16:47:59Z

Modified

2025-12-10T23:33:44.766247Z

Summary

[none]

Details

This project is related to Opigno LMS distribution. It implements the learning path, that combines together in a very flexible way the differents steps of a training in Opigno LMS.

The module does not set X-Frame-Options and blocks ability of other modules (e.g Security Kit) to add them, leaving it vulnerable to Clickjacking.

References

https://www.drupal.org/sa-contrib-2021-018

Credits

- Bryan Butler
- - https://www.drupal.org/user/3591325

Affected packages

Packagist:https://packages.drupal.org/8 / drupal/opigno_learning_path

Package

Name: drupal/opigno_learning_path
Purl: pkg:composer/drupal/opigno_learning_path

Affected ranges

Type

ECOSYSTEM

Events

Introduced

Fixed

1.11.0

Database specific

{
    "constraint": "<1.11.0"
}

Database specific

affected_versions

"<1.11.0"

source

"https://github.com/DrupalSecurityTeam/drupal-advisory-database/blob/main/advisories/opigno_learning_path/DRUPAL-CONTRIB-2021-018.json"