In Moodle 2.x and 3.x, text injection can occur in email headers, potentially leading to outbound spam.
{ "binaries": [ { "binary_name": "moodle", "binary_version": "3.0.3+dfsg-0ubuntu1" } ] }