VULNERABILITY INTELLIGENCE

CVE-2015-7231

CVSS score5 MEDIUM
EPSS probability1.05%
CISA KEVNot currently listed
Published2015-09-17
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:N

Description

The Commerce Commonwealth (CBA) module 7.x-1.x before 7.x-1.5 for Drupal does not properly validate payments, which allows remote attackers to make a failed payment appear valid via a crafted URL, related to a "response from commweb."

Weakness classification

  • CWE-20: Improper Input Validation

Primary references