CVE-2024-13257

CVE-2024-13257 affects Drupal Commerce View Receipt (module for Drupal). The root cause is insufficient authorization checks in the Commerce View Receipt module, allowing forceful browsing to access private information. Impact is described as an access bypass vulnerability affecting versions 0.0....