CVE-2024-13257

Incorrect Authorization vulnerability in Drupal Commerce View Receipt allows Forceful Browsing.This issue affects Commerce View Receipt: from 0.0.0 before 1.0.3...

CVE-2024-13257 Commerce View Receipt - Moderately critical - Access bypass - SA-CONTRIB-2024-021

Incorrect Authorization vulnerability in Drupal Commerce View Receipt allows Forceful Browsing.This issue affects Commerce View Receipt: from 0.0.0 before 1.0.3...

CVE-2024-13257

CVE-2024-13257 affects Drupal Commerce View Receipt (module for Drupal). The root cause is insufficient authorization checks in the Commerce View Receipt module, allowing forceful browsing to access private information. Impact is described as an access bypass vulnerability affecting versions 0.0....