The user editing form in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13, and earlier allows remote authenticated users to edit profile fields locked by the administrator.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2017-04-20T21:00:00

Updated: 2024-08-06T00:03:34.416Z

Reserved: 2016-03-30T00:00:00

Link: CVE-2016-3729

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2017-04-20T21:59:00.717

Modified: 2020-12-01T14:54:51.107

Link: CVE-2016-3729

cve-icon Redhat

No data.