Description
In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, users viewing the grade history report without the 'access all groups' capability were not restricted to viewing grades of users within their own groups.
Remediation
References
Related Vulnerabilities
WordPress Plugin FireCask Like & Share Button Cross-Site Scripting (1.1.5)
Oracle Database Server CVE-2006-3705 Vulnerability (CVE-2006-3705)
PHP Improper Input Validation Vulnerability (CVE-2014-9653)
WordPress Plugin Generate Child Theme Security Bypass (1.5.3)
WordPress 3.8.x Arbitrary File Deletion Vulnerability (3.8 - 3.8.26)