CVE-2024-13257

Incorrect Authorization vulnerability in Drupal Commerce View Receipt allows Forceful Browsing.This issue affects Commerce View Receipt: from 0.0.0 before 1.0.3...

CVE-2024-13257 Commerce View Receipt - Moderately critical - Access bypass - SA-CONTRIB-2024-021

Incorrect Authorization vulnerability in Drupal Commerce View Receipt allows Forceful Browsing.This issue affects Commerce View Receipt: from 0.0.0 before 1.0.3...

CVE-2024-13257

The Drupal Commerce View Receipt module (versions 0.0.0 through 1.0.2 ) is vulnerable to an Incorrect Authorization flaw. Due to insufficient access permission checks, a remote attacker can perform a Forceful Browsing attack to bypass security restrictions and view the private information of othe...