CVE-2024-13257

The Drupal Commerce View Receipt module (versions 0.0.0 through 1.0.2 ) is vulnerable to an Incorrect Authorization flaw (CWE-863). Due to insufficient authorization procedures, a remote attacker can bypass security restrictions to perform a Forceful Browsing attack, potentially viewing private i...