CVE-2025-48446
CVE-2025-48446 · Commerce Alphabank Redirect - Moderately critical - Access bypass - SA-CONTRIB-2025-067
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Incorrect Authorization vulnerability in Drupal Commerce Alphabank Redirect allows Functionality Misuse.This issue affects Commerce Alphabank Redirect: from 0.0.0 before 1.0.3.
CVSS 8.8 · High · EPSS 0.3% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
commerce alphabank redirect
- Versions
- ≥ 0.0.0, < 1.0.3: Affected (semver)
Update to 1.0.3
drupal/commerce_alphabank_redirect Packagist:https://packages.drupal.org/8
- Affected ranges
- ECOSYSTEM: < 1.0.3
Update to 1.0.3
drupal/commerce_alphabank_redirect Packagist
- Affected ranges
- ECOSYSTEM: < 1.0.3
Update to 1.0.3