Commerce View Receipt
1 CVEs
product
Monthly
Incorrect Authorization vulnerability in Drupal Commerce View Receipt allows Forceful Browsing.0.0 before 1.0.3. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Authentication Bypass
Commerce View Receipt
Drupal
NVD
CVSS 3.1
5.3
EPSS
0.3%
CVE-2024-13257
EPSS 0%
CVSS 5.3
MEDIUM
PATCH
This Month
Incorrect Authorization vulnerability in Drupal Commerce View Receipt allows Forceful Browsing.0.0 before 1.0.3. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Authentication Bypass
Commerce View Receipt
Drupal
NVD