Moodle 3.5.x before 3.5.4 allows SSRF.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-6970.json"