Launchpad.net

CVE 2023-28329

Insufficient validation of profile field availability condition resulted in an SQL injection risk (by default only available to teachers and managers).

See the CVE page on Mitre.org for more details.