[MEDIUM] Moodle places a session key in a URL

PKSA-hsbm-pzq5-tfbx CVE-2014-0125 GHSA-j465-7mp6-3xg3

Affected package: moodle/moodle

Affected version: >=2.6.0,<2.6.2|>=2.5.0,<2.5.5|<2.4.9

Reported by:
GitHub