PT-2026-97670

Name of the Vulnerable Software and Affected Versions Drupal Commerce Decoupled Checkout versions 1.0.0 through 1.8.0 Description Improperly controlled modification of dynamically-determined object attributes allows for object injection. The module provides REST endpoints for remote order creatio...