Moodle 3.11.15

Unsupported Moodle Version

This version of Moodle is no longer supported and will not receive fixes for security risks.
You are encouraged to upgrade to a supported version of Moodle.

Release date: 12 June 2023

Here is the full list of fixed issues in 3.11.15.

For developers

• MDL-77995 - Building JS modules with Grunt doesn't work if dirroot contains "/src"
• MDL-77733 - Enable accessibility tests by default during Behat init

Security improvements

• MDL-76688 - Add \ExplSyntaxOn to latex deny-list to prevent LaTeX3 programming syntax

Security fixes

• MSA-23-0016 - XSS risk on groups page
• MSA-23-0017 - Minor SQL injection risk on Mnet SSO access control page
• MSA-23-0018 - SSRF risk due to insufficient check on the cURL blocked hosts list