[MEDIUM] Moodle allows attackers to bypass a forced-password-change requirement

PKSA-27xq-htgk-jm9f CVE-2015-2272 GHSA-5659-g9p4-354f

Affected package: moodle/moodle

Affected version: >=2.8.0,<2.8.4|>=2.7.0,<2.7.6|<2.6.9

Reported by:
GitHub