CVE-2026-96378
2026-10-22
01h21 +00:00
01h21 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
CVE 描述
Commerce Decoupled Checkout - Moderately critical - Access bypass - SA-CONTRIB-2026-179
Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Commerce Decoupled Checkout allows Object Injection. This issue affects Commerce Decoupled Checkout versions: from 1.0.0 to 1.8.0.CVE 信息
相关弱点
| 弱点名称 | 来源 | |
|---|---|---|
| Improperly Controlled Modification of Dynamically-Determined Object Attributes The product receives input from an upstream component that specifies multiple attributes, properties, or fields that are to be initialized or updated in an object, but it does not properly control which attributes can be modified. |
