Skip to main content

Moodle 3.1.12

Unsupported Moodle Version
This version of Moodle is no longer supported and will not receive fixes for security risks.
You are encouraged to upgrade to a supported version of Moodle.

Release date: 17 May 2018

Here is the full list of fixed issues in 3.1.12.

Security issues​

  • MSA-18-0007 Calculated question type allows remote code execution by Question authors
  • MSA-18-0008 Users can download any file via portfolio assignment caller class
  • MSA-18-0009 Portfolio forum caller class allows a user to download any file
  • MSA-18-0010 User can shift a block from Dashboard to any page
  • MSA-18-0011 User who did not agree to the site policies can see the site homepage as if they had full site access
  • MSA-18-0012 Portfolio script allows instantiation of class chosen by user

Translations​