Description
The user editing form in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13, and earlier allows remote authenticated users to edit profile fields locked by the administrator.
Remediation
References
Related Vulnerabilities
Oracle Application Server Other Vulnerability (CVE-2005-3452)
WordPress 4.7.x Multiple Vulnerabilities (4.7 - 4.7.9)
Handlebars Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2019-20922)
WordPress Plugin Premium SEO Pack Multiple Vulnerabilities (1.8.0)
Django Uncontrolled Recursion Vulnerability (CVE-2019-14235)