In Moodle 3.x, the setting for blocked hosts list can be bypassed with multiple A record hostnames.
{
"nvd_published_at": "2018-01-22T08:29:00Z",
"severity": "MODERATE",
"github_reviewed_at": "2024-04-23T23:41:49Z",
"github_reviewed": true,
"cwe_ids": []
}