Moodle Exposure of Resource to Wrong Sphere Vulnerability - CVE-2021-43560
A flaw was found in Moodle in versions 3.11 to 3.11.3 3.10 to 3.10.7 3.9 to 3.9.10 and earlier unsupported versions. Insufficient capability checks made it possible to fetch other users39 calendar action events.