CVE-2024-13257 | HackTesting

Incorrect Authorization vulnerability in Drupal Commerce View Receipt allows Forceful Browsing.This issue affects Commerce View Receipt: from 0.0.0 before 1.0.3.

Credits

Norman Kämper-Leymann

Greg Mack

Greg Knaddison

Drew Webber

Greg Knaddison

Juraj Nemec

xjm

References

https://www.drupal.org/sa-contrib-2024-021