In Moodle 3.3, the course overview block reveals activities in hidden courses.
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Link | Tags |
---|---|
https://moodle.org/mod/forum/discuss.php?d=355555 | patch vendor advisory |
http://www.securityfocus.com/bid/99618 | vdb entry third party advisory |