Greg Mack

**Name of the Vulnerable Software and Affected Versions** Drupal Commerce View Receipt versions 0.0.0 through 1.0.2 **Description** The issue is related to insufficient authorization procedures in the Commerce View Receipt module of the Drupal CMS system. This can allow a remote attacker to bypass security restrictions and perform a forceful browsing attack. **Recommendations** For versions 0.0.0 through 1.0.2, update to version 1.0.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the Commerce View Receipt module until a patch is applied.