CVE-2023-28334 (published 2023-03-23T00:00:00)
Authenticated users were able to enumerate other users' names via the learning plans page.
Affected products: Vendor: n/a
Product: moodle
Versions: 4.1 to 4.1.1 and 4.0 to 4.0.6