Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability - CVE-2016-5014
In Moodle 2.x and 3.x an unenrolled user still receives event monitor notifications even though they can no longer access the course.
In Moodle 2.x and 3.x an unenrolled user still receives event monitor notifications even though they can no longer access the course.