Drupal warns of critical Commerce Core flaw exploited in attacks

First reported by The Hacker News at · Updated · 3 sources

Drupal warned admins to patch a critical access bypass vulnerability in the Commerce Core module that attackers are exploiting in the wild.

Covered by 3 publishers within 3 hours of the first report.

Summary from BleepingComputer.

Reporting3

The Hacker News Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass Flaw · info@thehackernews.com (The Hacker News)
BleepingComputer Drupal warns of critical Commerce Core flaw exploited in attacks · Sergiu Gatlan
SecurityWeek Drupal Commerce Core Vulnerability Exploited Against Online Stores · Eduard Kovacs