CVE-2015-5512: Improper Access Control

The me aliases module 6.x-2.x before 6.x-2.10 and 7.x-1.x before 7.x-1.2 for Drupal allows remote attackers to access Views using the "me" user argument handler by substituting "me" for a user id in a URL...

Drupal me aliases module security bypass vulnerability

Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. A security vulnerability exists in the Drupal me aliases module that allows an attacker to bypass certain security restrictions and perform unauthorized operations...