| Package | Affected versions | Patched versions |
|---|---|---|
| drupal/opigno_module | < 3.1.2 | 3.1.2 |
| opigno module | < 3.1.2 | 3.1.2 |
The Opigno module is related to Opigno LMS distribution. It implements the module entity, that is a sub-part of a training.
In the opigno_module module, uploaded files were not sufficiently validated to prevent arbitrary file uploads, which could lead to Remote Code Execution (RCE) and/or Cross Site Scripting (XSS).
This vulnerability is mitigated by the fact that it requires the attacker have a role with the permission "create opigno tincan activities".
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free