Commerce View Receipt Module Drupal Authentication Bypass Forceful Browsing

The vulnerability of the Commerce View Receipt module in the Drupal CMS system is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and execute a Forceful Browsing attack...

CVE-2024-13257: Incorrect Authorization

Incorrect Authorization vulnerability in Drupal Commerce View Receipt allows Forceful Browsing.This issue affects Commerce View Receipt: from 0.0.0 before 1.0.3...

PT-2024-10362 · Drupal · Drupal Commerce View Receipt +1

Name of the Vulnerable Software and Affected Versions: Drupal Commerce View Receipt versions 0.0.0 through 1.0.2 Description: The issue is related to insufficient authorization procedures in the Commerce View Receipt module of the Drupal CMS system. This can allow a remote attacker to bypass...