logo
DATABASE RESOURCES PRICING ABOUT US

CVE-2015-5515

Description

The Views Bulk Operations (VBO) module 6.x-1.x and 7.x-3.x before 7.x-3.3 for Drupal, when the bulk operation for changing Roles is enabled, allows remote authenticated users to edit user accounts and add arbitrary roles to the accounts by leveraging access to a user account listing view with VBO enabled.


Affected Software


CPE Name Name Version
views_bulk_operations_project:views_bulk_operations views bulk operations project views bulk operations 7.x-3.x
views_bulk_operations_project:views_bulk_operations views bulk operations project views bulk operations 7.x-3.0
views_bulk_operations_project:views_bulk_operations views bulk operations project views bulk operations 7.x-3.0
views_bulk_operations_project:views_bulk_operations views bulk operations project views bulk operations 7.x-3.1
views_bulk_operations_project:views_bulk_operations views bulk operations project views bulk operations 7.x-3.2
views_bulk_operations_project:views_bulk_operations views bulk operations project views bulk operations 7.x-3.0
views_bulk_operations_project:views_bulk_operations views bulk operations project views bulk operations 7.x-3.0
views_bulk_operations_project:views_bulk_operations views bulk operations project views bulk operations 6.x-1.x
views_bulk_operations_project:views_bulk_operations views bulk operations project views bulk operations 6.x-1.17
views_bulk_operations_project:views_bulk_operations views bulk operations project views bulk operations 7.x-3.0
views_bulk_operations_project:views_bulk_operations views bulk operations project views bulk operations 7.x-3.0
views_bulk_operations_project:views_bulk_operations views bulk operations project views bulk operations 7.x-3.0
views_bulk_operations_project:views_bulk_operations views bulk operations project views bulk operations 7.x-3.0