Description In Moodle 3.x, various course reports allow teachers to view details about users in the groups they can't access. Remediation References CVE-2017-12157 Related Vulnerabilities WordPress 5.7.x Multiple Vulnerabilities (5.7 - 5.7.2) Apache HTTP Server Out-of-bounds Write Vulnerability (CVE-2006-20001) WordPress Plugin BackWPup Cross-Site Scripting (3.2.3) PostgreSQL Other Vulnerability (CVE-2002-0802) WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce SQL Injection (4.1.7) Severity Medium Classification CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N Tags Missing Update Known Vulnerabilities CWE-200 CVE-2017-12157