3.7Niedrig
CVE-2026-118544Commerce Core - Moderately critical - Information disclosure - SA-CONTRIB-2026-259
Beschreibung
Exposure of Sensitive Information Through Data Queries vulnerability in Drupal Commerce Core allows Forceful Browsing. This issue affects Commerce Core versions: from 0.0.0 to 2.41.0, from 3.0.0 to 3.3.13.
Schwachstellentyp (CWE):
CWE-202
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| Drupal | Commerce Core | 0.0.0 – < 2.41.0, 3.0.0 – < 3.3.13 |