CVE-2017-2642

Moodle 3.x has user fullname disclosure on the user preferences page...