[HIGH] Moodle uses predictable password-recovery tokens

PKSA-hfyq-mgbf-xtb3 CVE-2015-5267 GHSA-382v-gxj9-ffhc

Affected package: moodle/moodle

Affected version: >=2.9.0,<2.9.2|>=2.8.0,<2.8.8|<2.7.10

Reported by:
GitHub