[MEDIUM] Moodle may allow authenticated users to enumerate other user's names via learning plans page

PKSA-g5h3-zwb4-389q CVE-2023-28334 GHSA-hh52-g5c4-wprh

Affected package: moodle/moodle

Affected version: <3.9.20|>=3.11.0,<3.11.13|>=4.0.0,<4.0.7|>=4.1.0,<4.1.2

Reported by:
GitHub