Moodle: teacher can access names of users they do not have permission to access
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 0.7%
exploitation probability
0.7%top 47% of all CVEs
observed exploitation
nono source reports it
Insufficient filtering of grade report history made it possible for teachers to access the names of users they could not otherwise access.
Affected products
moodle