CVE-2025-48446

creationtimestamp| type| source ---|---|--- 2025-06-11 17:16:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrdvwrytrz2r 2025-06-11 20:15:58+00:00| seen| Telegram/nn4r48fMtsoF4yprR5SnwOJcbR44UlHSPFU-GpYRsWktOw 2025-06-11 20:16:04+00:00| published-proof-of-concept|...

CVE-2025-48446

CVE-2025-48446: Drupal Commerce Alphabank Redirect has an Incorrect Authorization vulnerability enabling functionality misuse. Affected versions are 0.0.0 through 1.0.2; the issue is mitigated by upgrading to 1.0.3. CVSS v3.1 base score 8.8 (High) with NETWORK attack vector, no privileges require...