CVE-2016-5014: Exposure of Sensitive Information to an Unauthorized Actor

In Moodle 2.x and 3.x, an unenrolled user still receives event monitor notifications even though they can no longer access the course...