From 803e4c5c2ede1f4e17730c3efadebb31df228a43 Mon Sep 17 00:00:00 2001
From: Stevani Andolo <stevani.andolo@moodle.com>
Date: Thu, 30 Nov 2023 11:00:24 +0800
Subject: [PATCH] MDL-80174 tool_log: ensure "other" data is safely
 unserialized.

---
 admin/tool/log/classes/helper/reader.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/admin/tool/log/classes/helper/reader.php b/admin/tool/log/classes/helper/reader.php
index 2e947748da0..5cc28c3d941 100644
--- a/admin/tool/log/classes/helper/reader.php
+++ b/admin/tool/log/classes/helper/reader.php
@@ -75,7 +75,7 @@ trait reader {
      */
     public static function decode_other(?string $other) {
         if ($other === 'N;' || preg_match('~^.:~', $other)) {
-            return unserialize($other);
+            return unserialize($other, ['allowed_classes' => [stdClass::class]]);
         } else {
             return json_decode($other, true);
         }