PT-2025-25221 · Drupal · Drupal Commerce Alphabank Redirect

·

CVE-2025-48446

·

Published

2025-05-21

·

Updated

2025-06-12

CVSS v3.1

8.8

High

VectorAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Drupal Commerce Alphabank Redirect versions 0.0.0 through 1.0.2
Description The issue is related to an Incorrect Authorization vulnerability in Drupal Commerce Alphabank Redirect, allowing functionality misuse.
Recommendations For versions 0.0.0 through 1.0.2, update to version 1.0.3 or later to resolve the issue.

Exploit

Fix

Incorrect Authorization

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2025-48446
DRUPAL-CONTRIB-2025-067
GHSA-48WX-8736-JGX2

Affected Products

Drupal Commerce Alphabank Redirect