In Moodle 3.x, various course reports allow teachers to view details about users in the groups they can't access.Referenceshttp://www.securityfocus.com/bid/100848https://moodle.org/mod/forum/discuss.php?d=358586
