EPSS
Percentile
34.9%
Moodle is vulnerable to information disclosure. Authenticated attackers can use the core_enrol_get_enrolled_users web service to obtain sensitive information about course-participants.
core_enrol_get_enrolled_users
git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-51861
moodle.org/mod/forum/discuss.php?d=323234