Privilege Escalation

concrete5/concrete5 is vulnerable to privilege escalation. The vulnerability exists in 'bulkupdate.php' because the 'view' permissions granted users in that group can escalate to being an administrator using specially crafted curl...