A vulnerability in Moodle allows unauthenticated remote attackers to bypass access control checks on H5P content files. This flaw enables unauthorized viewing of restricted materials, including content in the system context and files from hidden or unavailable course modules, leading to information disclosure of protected content.