CVE-2015-7231

The Commerce Commonwealth (CBA) module 7.x-1.x before 7.x-1.5 for Drupal does not properly validate payments, which allows remote attackers to make a failed…

published September 17, 2015

CVSS
—
EPSS
1%
Percentile
63.9
In the wild
Unconfirmed
What it is

The Commerce Commonwealth (CBA) module 7.x-1.x before 7.x-1.5 for Drupal does not properly validate payments, which allows remote attackers to make a failed payment appear valid via a crafted URL, related to a "response from commweb."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01054 · 63.9th percentile
Published
2015-09-17T16:00Z
EPSS history
Timeline
  • 17 SEP 16:00Z
    The Commerce Commonwealth (CBA) module 7.x-1.x before 7.x-1.5 for Drupal does not properly validate payments, which allows remote attackers to make a failed…
    cvelistv5