CVE-2023-28334

Authenticated users were able to enumerate other users' names via the learning plans page...