Skip to main content

Moodle 3.2.7

Unsupported Moodle Version
This version of Moodle is no longer supported and will not receive fixes for security risks.
You are encouraged to upgrade to a supported version of Moodle.

Release date: 15 January 2018

Here is the full list of fixed issues in 3.2.7.

Security issues

  • MSA-18-0001 Server Side Request Forgery in the filepicker
  • MSA-18-0002 Setting for blocked hosts list can be bypassed with multiple A record hostnames
  • MSA-18-0003 Privilege escalation in quiz web services
  • MSA-18-0004 XSS in calendar event name