CVE-2023-28336 (published 2023-03-23T00:00:00)
Insufficient filtering of grade report history made it possible for teachers to access the names of users they could not otherwise access.
Affected products: Vendor: n/a
Product: moodle
Versions: 4.1 to 4.1.1, 4.0 to 4.0.6, 3.11 to 3.11.12, 3.9 to 3.9.19 and earlier unsupported versions