CVE-2024-13257
CVE-2024-13257 · Commerce View Receipt - Moderately critical - Access bypass - SA-CONTRIB-2024-021
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Incorrect Authorization vulnerability in Drupal Commerce View Receipt allows Forceful Browsing.This issue affects Commerce View Receipt: from 0.0.0 before 1.0.3.
CVSS 5.3 · Medium · EPSS 0.3% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
commerce view receipt
- Versions
- ≥ 0.0.0, < 1.0.3: Affected (semver)
Update to 1.0.3
drupal/commerce_view_receipt Packagist:https://packages.drupal.org/8
- Affected ranges
- ECOSYSTEM: < 1.0.3
Update to 1.0.3