[MEDIUM] Moodle uses the same key for QR login and auto-login

PKSA-my4y-h475-7mp5 CVE-2024-38277 GHSA-r82w-3phg-qvr4

Affected package: moodle/moodle

Affected version: <4.1.11|>=4.2.0-beta,<4.2.8|>=4.3.0-beta,<4.3.5|>=4.4.0-beta,<4.4.1

Reported by:
GitHub