Vulnerability DRUPAL-CONTRIB-2026-324
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
13 hours ago
November 11, 2026 at 05:48 PM UTC
No summary available
<3.1.2
<3.1.2
Details
This module enables you to sell licenses (such as roles or files) using Drupal Commerce.
The module doesn't sufficiently validate license order items, which under certain conditions could allow a customer to obtain a license without paying its full price.
This vulnerability is mitigated by the fact that the site must expose order items to modification outside of the standard cart form.
References
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
13 hours ago
No summary available
<3.1.2 DRUPAL-CONTRIB-2026-323
<3.1.2 DRUPAL-CONTRIB-2026-323
Unknown
14 days ago
No summary available
<3.1.1 DRUPAL-CONTRIB-2026-260
<3.1.1 DRUPAL-CONTRIB-2026-260
Impacted packages
Timeline
Published
13 hours ago
November 11, 2026 at 05:48 PM UTC
Last Modified
12 hours ago
November 11, 2026 at 06:45 PM UTC