Moodle 3.9.15 release notes

Important: This content of this page has been updated and migrated to the new Moodle Developer Resources. The information contained on the page should no longer be seen up-to-date. Why not view this page on the new site and help us to migrate more content to the new site!

Releases > Moodle 3.9.15 release notes

Release date: Not yet released

Here is the full list of fixed issues in 3.9.15.

For developers

• MDL-75084 - Add behat generators for blog entries
• MDL-74613 - Add behat generators for grades grade
• MDL-74674 - Add behat generator to create notification
• MDL-74864 - Allow specifying forum discussion group in behat generators
• MDL-74816 - Allow specifying default file's name in mod_resource generator

Security fixes

• MSA-22-0015 PostScript Code Injection / Remote code execution risk
• MSA-22-0016 Arbitrary file read when importing lesson questions
• MSA-22-0017 Stored XSS and blind SSRF possible via SCORM track details
• MSA-22-0018 Open redirect risk in mobile auto-login feature
• MSA-22-0019 LTI module reflected XSS risk - affecting unauthenticated users only
• MSA-22-0020 Upgrade moodle-mlbackend-python and update its reference in /lib/mlbackend/python/classes/processor.php (upstream)

See also

• Moodle 3.9.14 release notes