Information Disclosure

Moodle is vulnerable to information disclosure. Authenticated attackers can read rating values to obtain sensitive information. This happens because it mishandles group-based authorization checks...