Moodle 3.9.22

Unsupported Moodle Version

This version of Moodle is no longer supported and will not receive fixes for security risks.
You are encouraged to upgrade to a supported version of Moodle.

Release date: 12 June 2023

Here is the full list of fixed issues in 3.9.22.

For developers

• MDL-77995 - Building JS modules with Grunt doesn't work if dirroot contains "/src"

Security improvements

• MDL-76688 - Add \ExplSyntaxOn to latex deny-list to prevent LaTeX3 programming syntax

Security fixes

• MSA-23-0017 - Minor SQL injection risk on Mnet SSO access control page
• MSA-23-0018 - SSRF risk due to insufficient check on the cURL blocked hosts list