High, CVSS 8.8PackagistPublished
Drupal Commerce Eurobank (Redirect) Incorrect Authorization vulnerability
CVE-2025-48445 · GHSA-q9h3-r6wr-p3j3
- Affected
- Packagist drupal/commerce_eurobank_redirect < 2.1.1
- Fixed in
- 2.1.1· Vendor fix available
- Issue
- Incorrect Authorization vulnerability in Drupal Commerce Eurobank (Redirect) allows Functionality Misuse. This issue affects Commerce Eurobank (Redirect): from 0.0.0 before 2.1.1.
Recommended action: Upgrade to 2.1.1 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.