Insufficient validation of profile field availability condition resulted in an SQL injection risk (by default only available to teachers and managers).Referenceshttps://bugzilla.redhat.com/show_bug.cgi?id=2179406https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3QZN34VSF4HTCW3C3ZP2OZYSLYUKADPF/https://moodle.org/mod/forum/discuss.php?d=445061
