Grade Information Leakage

Moodle is vulnerable to grade information leakage. The leakage exists because lib/classes/gradesexternal.php does not enforce moodle/grade:viewhidden capability, allowing the students to view hidden grades through getgrade services...