CVE-2018-15881
An issue was discovered in Joomla! before 3.8.12. Inadequate checks regarding disabled fields can lead to an ACL violation.
Date published : 2018-08-28
http://www.securityfocus.com/bid/105161
https://developer.joomla.org/security-centre/745-20180803-core-acl-violation-in-custom-fields.html