← Database

CVE-2026-96378

MEDIUM CVSS: 4.3 Published: 2026-10-22 Modified: 2026-10-22

Description

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Commerce Decoupled Checkout allows Object Injection. This issue affects Commerce Decoupled Checkout versions: from 1.0.0 to 1.8.0.

Affected Platforms

Unknown

Weakness Type

CWE-915

References