Moodle 3.5.x before 3.5.4 allows SSRF.
{ "binaries": [ { "binary_name": "moodle", "binary_version": "3.0.3+dfsg-0ubuntu1" } ] }