A vulnerability in Drupal Commerce Core allows exposure of sensitive information through data queries, enabling forceful browsing. This affects Commerce Core versions from 0.0.0 to 2.41.0 and from 3.0.0 to 3.3.13. No CVSS score or patch information is provided.