[MEDIUM] Moodle Portfolio forum caller class allows a user to download any file

PKSA-mwbd-dwm5-kvkp CVE-2018-1135 GHSA-vxmv-74rf-vqgp

Affected package: moodle/moodle

Affected version: >=3.4,<3.4.3|>=3.3,<3.3.6|>=3.2,<3.2.9|>=3.1,<3.1.12

Reported by:
GitHub