[MEDIUM] Moodle provides calendar-event data without considering whether an activity is hidden

PKSA-z4n4-rs2c-6k1v CVE-2016-2156 GHSA-h8vc-v44p-5r2q

Affected package: moodle/moodle

Affected version: >=3.0.0,<3.0.3|>=2.9.0,<2.9.5|>=2.8.0,<2.8.11|<2.7.13

Reported by:
GitHub