admin/tool/monitor/lib.php in Event Monitor in Moodle 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 does not consider the moodle/course:viewhiddencourses capability, which allows remote authenticated users to discover hidden course names by subscribing to a rule.
{
"nvd_published_at": "2016-05-22T20:59:00Z",
"github_reviewed_at": "2024-01-26T20:15:09Z",
"cwe_ids": [
"CWE-200"
],
"github_reviewed": true,
"severity": "MODERATE"
}