GitHub Advisoryadvisory · Packagist

GHSA-48wx-8736-jgx2 Drupal Commerce Alphabank Redirect Incorrect Authorization vulnerability

HIGH Published 2025-06-11 Modified 2025-06-11 Official page ↗
Aliases
CVE-2025-48446
Ecosystem
Packagist
Packages
drupal/commerce_alphabank_redirect
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-863
Reviewed
2025-06-11

Affected packages

• Packagist drupal/commerce_alphabank_redirect: < 1.0.3 → fixed in 1.0.3

Description

Incorrect Authorization vulnerability in Drupal Commerce Alphabank Redirect allows Functionality Misuse. This issue affects Commerce Alphabank Redirect: from 0.0.0 before 1.0.3.

Related

Alias · CVE (1)

  • CVE-2025-48446 Incorrect Authorization vulnerability in Drupal Commerce Alphabank Redirect allows Functionality Misuse.This issue affects Commerce… vulnerability

Weakness · CWE (1)

  • CWE-863 Incorrect Authorization weakness

References