A flaw was found in moodle where an SQL injection risk was identified in Badges code relating to configuring criteria.
{ "binaries": [ { "binary_name": "moodle", "binary_version": "3.0.3+dfsg-0ubuntu1" } ] }