Description
lib/navigationlib.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allows remote authenticated users to obtain sensitive course-structure information by leveraging access to a student account with a suspended enrolment.
Remediation
References
Related Vulnerabilities
Apache Tomcat Incorrect Authorization Vulnerability (CVE-2016-6797)
WordPress 4.2.x Multiple Vulnerabilities (4.2 - 4.2.11)
WordPress Plugin WP Support Plus Responsive Ticket System Security Bypass (7.1.4)
WordPress Plugin WP Cerber Security, Anti-spam & Malware Scan Cross-Site Request Forgery (2.7.2)
WordPress Plugin Analytics-Gtag Restricted File Upload (1.8.1)