Lucene search
K

4 matches found

OSV
OSV
added 2025/05/21 5:28 p.m.2 views

DRUPAL-CONTRIB-2025-067

This module enables you to pay for Commerce order to an environment provided and secured by the bank The module doesn't sufficiently verify the payment status on canceled orders. An attacker can issue a specially crafted request to update the order status to completed...

8.8CVSS6.8AI score0.00287EPSS
Exploits0References1
OSV
OSV
added 2025/05/21 5:28 p.m.3 views

DRUPAL-CONTRIB-2025-066

This module enables you to pay for Commerce order to an environment provided and secured by the bank The module doesn't sufficiently verify the payment status on canceled orders. An attacker can issue a specially crafted request to update the order status to completed...

8.8CVSS6.8AI score0.00287EPSS
Exploits0References1
Drupal
Drupal
added 2025/05/21 12:0 a.m.10 views

Commerce Eurobank (Redirect) - Moderately critical - Access bypass - SA-CONTRIB-2025-066

This module enables you to pay for Commerce order to an environment provided and secured by the bank The module doesn't sufficiently verify the payment status on canceled orders. An attacker can issue a specially crafted request to update the order status to completed...

8.8CVSS6.7AI score0.00287EPSS
Exploits0References2
Drupal
Drupal
added 2025/05/21 12:0 a.m.8 views

Commerce Alphabank Redirect - Moderately critical - Access bypass - SA-CONTRIB-2025-067

This module enables you to pay for Commerce order to an environment provided and secured by the bank The module doesn't sufficiently verify the payment status on canceled orders. An attacker can issue a specially crafted request to update the order status to completed...

8.8CVSS6.7AI score0.00287EPSS
Exploits0References2
Rows per page
Query Builder