Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability - CVE-2015-0215
calendar/externallib.php in Moodle through 2.5.9 2.6.x before 2.6.7 2.7.x before 2.7.4 and 2.8.x before 2.8.2 allows remote authenticated users to obtain sensitive calendar-event information via a web-services request.