Description Moodle 3.x has Server Side Request Forgery in the filepicker. Remediation References CVE-2018-1042 Related Vulnerabilities PHP Use After Free Vulnerability (CVE-2016-7479) WordPress Plugin ABASE Multiple Vulnerabilities (2.6) WordPress Configuration Vulnerability (CVE-2009-2335) WordPress Plugin Calendar by WD-Responsive Event Calendar for WordPress Cross-Site Scripting (1.5.38) Three.js Uncontrolled Resource Consumption Vulnerability (CVE-2020-28496) Severity Medium Classification CVE-2018-1042 CWE-918 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Tags Missing Update Known Vulnerabilities