The router’s inconsistent response to invalid course IDs allowed attackers to infer which course IDs exist, potentially aiding reconnaissance.
| Software | From | Fixed in |
|---|---|---|
moodle / moodle
|
5.0.0 | 5.0.3 |