PT-2025-25220 · Drupal · Drupal Commerce Eurobank

·

CVE-2025-48445

·

Published

2025-05-21

·

Updated

2025-06-16

CVSS v3.1

8.8

High

VectorAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Drupal Commerce Eurobank (Redirect) versions 0.0.0 through 2.1.0
Description The issue is related to an Incorrect Authorization vulnerability, allowing functionality misuse.
Recommendations For versions 0.0.0 through 2.1.0, update to version 2.1.1 or later to resolve the issue.

Exploit

Fix

Incorrect Authorization

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2025-48445
DRUPAL-CONTRIB-2025-066
GHSA-Q9H3-R6WR-P3J3

Affected Products

Drupal Commerce Eurobank