Moodle 3.5.x before 3.5.4 allows SSRF.Referenceshttps://www.excellium-services.com/cert-xlm-advisory/cve-2019-6970/
