Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability - CVE-2016-5014 - Vulnerability Database

Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability - CVE-2016-5014

Medium
Reference: CVE-2016-5014
Title: Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Overview:

In Moodle 2.x and 3.x an unenrolled user still receives event monitor notifications even though they can no longer access the course.