Information Leak

moodle/moodle has an information leak. The database activity module has a flaw which allows authenticated users to read activity entries from a different group's users. The flaw can be exploited through the advanced search...