CVE-2016-8643 (moodle)

CVE-2016-8643 (moodle)

In Moodle 2.x and 3.x, non-admin site managers may accidentally edit admins via web services.

Source: CVE-2016-8643 (moodle)