Headline
GHSA-hh52-g5c4-wprh: Moodle may allow authenticated users to enumerate other user's names via learning plans page
Authenticated users were able to enumerate other users’ names via the learning plans page.
Moodle may allow authenticated users to enumerate other user’s names via learning plans page
Moderate severity GitHub Reviewed Published Mar 23, 2023 to the GitHub Advisory Database • Updated Mar 23, 2023
Related news
CVE-2023-28334
Authenticated users were able to enumerate other users' names via the learning plans page.