Topic: | System user profile leaks email when maildisplay == 2 |
Severity: | Major |
Versions affected: | < 2.0.3 (1.9.x not affected) |
Reported by: | Petr Škoda |
Issue no.: | MDL-26621 |
Solution: | Upgrade to 2.0.3 |
Workaround: | Disable email display in profiles |
Description:
Email addresses of users were being displayed on the full profile page when they had indicated it should appear to course members only.