Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability - CVE-2012-1169
Moodle before 2.2.2 has Personal information disclosure when administrative setting users name display is set to first name only full names are shown in page breadcrumbs.