title: Saving user accounts can sometimes grant the user all roles
link: https://www.drupal.org/SA-CORE-2016-002
cve: CVE-2016-6211
branches:
8.0.x:
time: 2016-06-15 20:59:00
versions: ['>=8.0','<8.1.0']
8.1.x:
time: 2016-06-15 20:59:00
versions: ['>=8.1.0','<8.1.3']
reference: composer://drupal/drupal