A vulnerability in Moodle allows an authenticated remote user to bypass host-blocking restrictions in the URL downloader due to incorrect handling of IPv4-mapped IPv6 addresses. This flaw enables Server-Side Request Forgery (SSRF) by making the server request restricted destinations via crafted URLs. The issue has a medium severity rating with a CVSS score of 4.3. No affected versions or patch information are provided.