conv.

← The whole story
Security
Drupal Commerce Core Authorization Bypass Actively Exploited

Drupal urges store owners to audit orders and patch immediately

1 Oct 30 7:07 AM · 12d ago · 1 article · 3 posts · 2 sources · development 1 of 1

Drupal issued guidance for online store operators to update to fixed versions (3.3.13 or 8.x-2.41) and review their store orders for inconsistencies. The advisory emphasizes that unauthenticated attackers can exploit the flaw regardless of module configuration.

Drupal urges store owners to audit orders and patch immediately
thehackernews.com

“Sites should audit their orders for inconsistencies as this vulnerability is being actively exploited.”

Drupal

Drupal Affected platform & issuer of advisoryDan Puccetti, Marcus Johansson, Robert Snyder Security researchers

The whole story articlesposts the bright band is this development · numbered dots are the others · click one to jump

Peak 2 pieces in 3h at Oct 30, 5 AM; 6 pieces over 13 days (2 articles · 4 posts) Oct 30, 5 AM — 2 pieces · 1 article · 1 post — Mastodon 1, Newswires 1Oct 30, 8 AM — quietOct 30, 11 AM — quietOct 30, 2 PM — 1 piece · 1 post — Mastodon 1Oct 30, 5 PM — quietOct 30, 8 PM — quietOct 30, 11 PM — 1 piece · 1 post — Mastodon 1Oct 31, 2 AM — quietOct 31, 5 AM — quietOct 31, 8 AM — quietOct 31, 11 AM — quietOct 31, 2 PM — 1 piece · 1 post — Mastodon 1Oct 31, 5 PM — quietOct 31, 8 PM — quietOct 31, 11 PM — quietNov 1, 1 AM — quietNov 1, 4 AM — 1 piece · 1 article — Mastodon 1Nov 1, 7 AM — quietNov 1, 10 AM — quietNov 1, 1 PM — quietNov 1, 4 PM — quietNov 1, 7 PM — quietNov 1, 10 PM — quietNov 2, 1 AM — quietNov 2, 4 AM — quietNov 2, 7 AM — quietNov 2, 10 AM — quietNov 2, 1 PM — quietNov 2, 4 PM — quietNov 2, 7 PM — quietNov 2, 10 PM — quietNov 3, 1 AM — quietNov 3, 4 AM — quietNov 3, 7 AM — quietNov 3, 10 AM — quietNov 3, 1 PM — quietNov 3, 4 PM — quietNov 3, 7 PM — quietNov 3, 10 PM — quietNov 4, 1 AM — quietNov 4, 4 AM — quietNov 4, 7 AM — quietNov 4, 10 AM — quietNov 4, 1 PM — quietNov 4, 4 PM — quietNov 4, 7 PM — quietNov 4, 10 PM — quietNov 5, 1 AM — quietNov 5, 4 AM — quietNov 5, 7 AM — quietNov 5, 10 AM — quietNov 5, 1 PM — quietNov 5, 4 PM — quietNov 5, 7 PM — quietNov 5, 10 PM — quietNov 6, 1 AM — quietNov 6, 4 AM — quietNov 6, 7 AM — quietNov 6, 10 AM — quietNov 6, 1 PM — quietNov 6, 4 PM — quietNov 6, 7 PM — quietNov 6, 10 PM — quietNov 7, 1 AM — quietNov 7, 4 AM — quietNov 7, 7 AM — quietNov 7, 10 AM — quietNov 7, 1 PM — quietNov 7, 4 PM — quietNov 7, 7 PM — quietNov 7, 10 PM — quietNov 8, 1 AM — quietNov 8, 4 AM — quietNov 8, 7 AM — quietNov 8, 10 AM — quietNov 8, 1 PM — quietNov 8, 4 PM — quietNov 8, 7 PM — quietNov 8, 10 PM — quietNov 9, 1 AM — quietNov 9, 4 AM — quietNov 9, 7 AM — quietNov 9, 10 AM — quietNov 9, 1 PM — quietNov 9, 4 PM — quietNov 9, 7 PM — quietNov 9, 10 PM — quietYesterday, 1 AM — quietYesterday, 4 AM — quietYesterday, 7 AM — quietYesterday, 10 AM — quietYesterday, 1 PM — quietYesterday, 4 PM — quietYesterday, 7 PM — quietYesterday, 10 PM — quietToday, 1 AM — quietToday, 4 AM — quietToday, 7 AM — quietToday, 10 AM — quietToday, 1 PM — quietToday, 4 PM — quietToday, 7 PM — quiet 1
1Drupal urges store owners to audit orders…
Oct 31Nov 1Nov 2Nov 3Nov 4Nov 5Nov 6Nov 7Nov 8Nov 9yesterdaynow · 8:40 PM ET

What was reported 1 claim about this development

  1. 1 outlet Drupal Commerce Core Vulnerability Exploited Against Online Stores

    first by SecurityWeek, 12d ago

What people said 2 voices · verbatim

All 1 developments of Drupal Commerce Core Authorization Bypass Actively Exploited →

MastodonNewswires