| Topic: | System user profile leaks email when maildisplay == 2 |
| Severity: | Major |
| Versions affected: | < 2.0.3 (1.9.x not affected) |
| Reported by: | Petr Škoda |
| Issue no.: | MDL-26621 |
| Solution: | Upgrade to 2.0.3 |
| Workaround: | Disable email display in profiles |
Description:
Email addresses of users were being displayed on the full profile page when they had indicated it should appear to course members only.