Threats tagged 'drupal-contrib-2026-262'

The Drupal Commerce Shipping module has an access control vulnerability in the form to resend receipts. This flaw allows certain users, under specific configurations, to access receipts and customer information for orders they should not be authorized to view. The issue affects versions prior to 2.16.0 and versions from 3.0.0 up to but not including 3.0.6. Fixed versions are 2.16.0 and 3.0.6.