CVE 2016-8644

In Moodle 2.x and 3.x, the capability to view course notes is checked in the wrong context.

See the

CVE page on Mitre.org for more details.

References