Description In Moodle 3.x, various course reports allow teachers to view details about users in the groups they can't access. Remediation References CVE-2017-12157 Related Vulnerabilities Envoy Proxy Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2023-27493) WebLogic CVE-2016-0638 Vulnerability (CVE-2016-0638) WordPress Plugin WPCB Cross-Site Scripting (2.4.8) WordPress Other Vulnerability (CVE-2007-0262) Jenkins Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-1810) Severity Medium Classification CVE-2017-12157 CWE-200 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N Tags Missing Update Known Vulnerabilities