Moodle 3.x has Server Side Request Forgery in the filepicker.
CVE Status: Modified
No CVSS data available
Exploit-db Github