Information Disclosure Through Reading Restriction Bypass

Moodle is susceptible to information disclosure. The database activity module does not enforce the minimum participate entry count before displaying other users comments. This allows users to view other participant’s entries using advanced search before they are allowed to.