CVE-2024-13257

The Commerce View Receipts module enables you to view commerce order receipts in the browser. The module doesn't sufficiently check access permission...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

The Commerce View Receipts module enables you to view commerce order receipts in the browser.

The module doesn't sufficiently check access permissions, allowing an unauthorised user to view the private information of other customers.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Packagist:https://packages.drupal.org/8 drupal/commerce_view_receipt

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.3"}],"database_specific":{"constraint":"<1.0.3"}}]