Moodle · Moodle · CVE-2013-2080
**Name of the Vulnerable Software and Affected Versions**
Moodle versions 2.2.10 and earlier, 2.3.x before 2.3.7, 2.4.x before 2.4.4
**Description**
The issue allows remote authenticated users to obtain sensitive information by leveraging the student role and reading the Gradebook Overview report, due to the core grade component not properly considering the existence of hidden grades.
**Recommendations**
For Moodle versions 2.2.10 and earlier, update to version 2.2.11 or later.
For Moodle versions 2.3.x before 2.3.7, update to version 2.3.7 or later.
For Moodle versions 2.4.x before 2.4.4, update to version 2.4.4 or later.