[HIGH] Moodle Portfolio script allows instantiation of class chosen by user

PKSA-h8ck-3y9r-f8ff CVE-2018-1137 GHSA-vxqh-mx28-7ghw

Affected package: moodle/moodle

Affected version: >=3.4,<3.4.3|>=3.3,<3.3.6|>=3.2,<3.2.9|>=3.1,<3.1.12

Reported by:
GitHub