In Moodle 3.x, the setting for blocked hosts list can be bypassed with multiple A record hostnames.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Moodle | Moodle | 3.2.0 (including) | 3.2.0 (including) |
| Moodle | Moodle | 3.2.1 (including) | 3.2.1 (including) |
| Moodle | Moodle | 3.2.2 (including) | 3.2.2 (including) |
| Moodle | Moodle | 3.2.3 (including) | 3.2.3 (including) |
| Moodle | Moodle | 3.2.4 (including) | 3.2.4 (including) |
| Moodle | Moodle | 3.2.5 (including) | 3.2.5 (including) |
| Moodle | Moodle | 3.2.6 (including) | 3.2.6 (including) |
| Moodle | Moodle | 3.3.0 (including) | 3.3.0 (including) |
| Moodle | Moodle | 3.3.1 (including) | 3.3.1 (including) |
| Moodle | Moodle | 3.3.2 (including) | 3.3.2 (including) |
| Moodle | Moodle | 3.3.3 (including) | 3.3.3 (including) |
| Moodle | Moodle | 3.4.0 (including) | 3.4.0 (including) |
| Moodle | Ubuntu | artful | * |
| Moodle | Ubuntu | bionic | * |
| Moodle | Ubuntu | cosmic | * |
| Moodle | Ubuntu | disco | * |
| Moodle | Ubuntu | eoan | * |
| Moodle | Ubuntu | esm-apps/xenial | * |
| Moodle | Ubuntu | trusty | * |
| Moodle | Ubuntu | xenial | * |