What the vulnerability does

01Description

It was possible for some users without permission to view other users' full names to do so via the online users block in moodle before 3.10.2, 3.9.5, 3.8.8, 3.5.17.

Key dates

02Disclosure timeline

March 15, 2021 CVE published
August 3, 2024 Record updated