A Cross-Site Request Forgery (CSRF) vulnerability exists in Drupal Commerce Core affecting versions from 0.0.0 to 2.41.0 and from 3.0.0 to 3.3.13. This vulnerability allows an attacker to perform unauthorized actions on behalf of authenticated users without their consent.