Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, and 2.8 through 2.8.11 allows remote attackers to obtain the names of hidden forums and forum discussions.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-3731.json"