It was found in Moodle before version 3.10.1, 3.9.4 and 3.8.7 that a insufficient capability checks in some grade related web services meant students were able to view other students grades.
{
"versions": [
{
"introduced": "0"
},
{
"fixed": "3.8.7"
},
{
"introduced": "3.9.0"
},
{
"fixed": "3.9.4"
},
{
"introduced": "3.10.0"
},
{
"fixed": "3.10.1"
}
]
}