CVE-2015-5515

The CVE-2015-5515 issue affects the Drupal contributed module Views Bulk Operations (VBO) on versions 6.x-1.x and 7.x-3.x prior to 7.x-3.3. The vulnerability arises when the bulk operation for changing Roles is enabled and a user with access to a user listing view (with VBO enabled) can remotely ...