description: Insufficient validation of profile field availability condition resulted in an SQL injection risk (by default only available to teachers and managers).
problem types: CWE-89
affected:
{
vendor: n/a
product: moodle
versions:
version: 4.1 to 4.1.1, 4.0 to 4.0.6, 3.11 to 3.11.12, 3.9 to 3.9.19 and earlier unsupported versions, status: affected
}