[Security-news] Multi-Step Registration - Critical - Unsupported Module - SA-CONTRIB-2018-023

[security-news at drupal.org]

View online: https://www.drupal.org/sa-contrib-2018-023

Project: Multi-Step Registration [1]
Date: 2018-May-09
Security risk: *Critical* 16∕25
AC:None/A:User/CI:Some/II:Some/E:Proof/TD:Default [2]
Vulnerability: Unsupported Module

Description: 
With Multi-Step Registration you can create multi-step (wizard) user account
registration forms.

The security team is marking this module unsupported.   There is a known
security issue with the module that has not been fixed by the maintainer.  If
you would like to maintain this module, please read:
https://www.drupal.org/node/251466 [3].

The security team marks all unsupported modules critical by default.

Solution: 
If you use the step module for Drupal you should uninstall it.

Reported By: 
Ayesh Karunaratne [4]

Fixed By: 
N/A


[1] https://www.drupal.org/project/step
[2] https://www.drupal.org/security-team/risk-levels
[3] https://www.drupal.org/node/251466
[4] https://www.drupal.org/u/Ayesh