—
DRUPAL-CONTRIB-2024-021
Details
The Commerce View Receipts module enables you to view commerce order receipts in the browser.
The module doesn't sufficiently check access permissions, allowing an unauthorised user to view the private information of other customers.
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist:https://packages.drupal.org/8/drupal/commerce_view_receipt
Introduced in:
0Fixed in: 1.0.3Upgrade drupal/commerce_view_receipt to 1.0.3 or newer (ecosystem packagist:https://packages.drupal.org/8).