An Incorrect Authorization vulnerability in the Drupal Bulk Update User Roles module allows forceful browsing. This affects versions from 0.0.0 up to 1.0.5. The vulnerability could permit unauthorized access to functionality or data by bypassing intended authorization checks.