Moodle 3.9.17
Unsupported Moodle Version
This version of Moodle is no longer supported for general bug fixes.
You are encouraged to upgrade to a supported version of Moodle.
You are encouraged to upgrade to a supported version of Moodle.
Release date: 12 September 2022
Here is the full list of fixed issues in 3.9.17.
Security fixes
- MSA-22-0023 - Stored XSS and page denial of service risks due to recursive rendering in Mustache template helpers
- MSA-22-0024 - Remote code execution risk when restoring malformed backup file from Moodle 1.9
- MSA-22-0025 - Minor SQL injection risk in admin user browsing
- MSA-22-0026 - No groups filtering in H5P activity attempts report