Moodle · Moodle · CVE-2011-4593
**Name of the Vulnerable Software and Affected Versions**
Moodle versions 1.9.x through 1.9.14
Moodle versions 2.0.x through 2.0.5
Moodle versions 2.1.x through 2.1.2
**Description**
The issue arises from improper handling of user/action redir group messages, allowing remote authenticated users to discover e-mail addresses by visiting the messaging interface.
**Recommendations**
For Moodle versions 1.9.x through 1.9.14, update to version 1.9.15 or later.
For Moodle versions 2.0.x through 2.0.5, update to version 2.0.6 or later.
For Moodle versions 2.1.x through 2.1.2, update to version 2.1.3 or later.