Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability - CVE-2021-20281
It was possible for some users without permission to view other users39 full names to do so via the online users block in moodle before 3.10.2 3.9.5 3.8.8 3.5.17.