An issue exists in Joomla! prior to 3.8.12. Inadequate checks regarding disabled fields can lead to an ACL violation.
joomla joomla\\!