Description
In Moodle 2.x and 3.x, searching of arbitrary blogs is possible because a capability check is missing.
Remediation
References
Related Vulnerabilities
Internet Information Services Other Vulnerability (CVE-2006-6579)
Craft CMS Weak Password Recovery Mechanism for Forgotten Password Vulnerability (CVE-2019-15929)
Oracle JRE CVE-2013-2432 Vulnerability (CVE-2013-2432)
MyBB Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-9410)
WordPress Plugin PWA for WP & AMP Unspecified Vulnerability (1.0.8)