CVE-2019-3848

CVE-2019-3848 describes a vulnerability in Moodle versions prior to 3.6.3, 3.5.5, and 3.4.8, where insufficient permission checks allowed authenticated non-guest users to view unauthorized calendar event details through the edit event modal popup. This is a medium-severity vulnerability with a CVSS score of 4.3, indicating low impact as it only granted read-only access to sensitive information without the ability to modify events. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.