Description
Authenticated users were able to enumerate other users' names via the learning plans page.
Remediation
References
Related Vulnerabilities
WordPress Plugin Social Media Widget Serving Spam (4.0)
MySQL CVE-2019-2681 Vulnerability (CVE-2019-2681)
WordPress Plugin CataBlog 'category' Parameter Cross-Site Scripting (1.6.2)
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-7834)
Liferay DXP Deserialization of Untrusted Data Vulnerability (CVE-2020-15842)