Description
calendar/externallib.php in Moodle through 2.5.9, 2.6.x before 2.6.7, 2.7.x before 2.7.4, and 2.8.x before 2.8.2 allows remote authenticated users to obtain sensitive calendar-event information via a web-services request.
Remediation
References
Related Vulnerabilities
MySQL CVE-2017-3638 Vulnerability (CVE-2017-3638)
WordPress Plugin BackWPup Unspecified Vulnerability (3.4.3)
Joomla Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2020-35611)
Joomla CVE-2012-0819 Vulnerability (CVE-2012-0819)
Jenkins Improper Input Validation Vulnerability (CVE-2018-1000068)