description: Authenticated users were able to enumerate other users' names via the learning plans page.
problem types: CWE-200
affected:
{
vendor: n/a
product: moodle
versions:
version: 4.1 to 4.1.1 and 4.0 to 4.0.6, status: affected
}