Moodle Permissions Privileges and Access Controls Vulnerability - CVE-2016-8644
In Moodle 2.x and 3.x the capability to view course notes is checked in the wrong context.
In Moodle 2.x and 3.x the capability to view course notes is checked in the wrong context.