From fdacc779e7f2967d2ae8b020668b573a52dfecf8 Mon Sep 17 00:00:00 2001
From: Stevani Andolo <stevani.andolo@moodle.com>
Date: Thu, 30 Nov 2023 11:00:24 +0800
Subject: [PATCH] MDL-80174 tool_log: ensure "other" data is safely
 unserialized.

---
 admin/tool/log/classes/helper/reader.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/admin/tool/log/classes/helper/reader.php b/admin/tool/log/classes/helper/reader.php
index e8543e2e7fe..d8c5d3c314e 100644
--- a/admin/tool/log/classes/helper/reader.php
+++ b/admin/tool/log/classes/helper/reader.php
@@ -82,7 +82,7 @@ trait reader {
      */
     public static function decode_other(?string $other) {
         if ($other === 'N;' || preg_match('~^.:~', $other ?? '')) {
-            return unserialize($other);
+            return unserialize($other, ['allowed_classes' => [stdClass::class]]);
         } else {
             return json_decode($other ?? '', true);
         }