Exposure of Sensitive Information Through Data Queries vulnerability in Drupal Commerce Core allows Forceful Browsing.
Exposure of Sensitive Information Through Data Queries vulnerability in Drupal Commerce Core allows Forceful Browsing. This issue affects Commerce Core versions: from 0.0.0 to 2.41.0, from 3.0.0 to 3.3.13.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- Drupal
- Product
- Commerce Core
- Weakness
- CWE-202
- Exposure class
- Web platform
- NVD status
- Received
Why it ranks 7 (Routine)
- Product class: web platform
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.