An incorrect authorization vulnerability in Drupal Commerce Shipping allows forceful browsing. This affects Commerce Shipping versions from 0.0.0 to 2.16.0 and from 3.0.0 to 3.0.6. The flaw could enable unauthorized users to access resources or pages they should not be able to reach.