TI-2015-06004 CVE-2015-7231 · GHSA-gwww-q956-6jxfThe Commerce Commonwealth (CBA) module 7.x-1.x before 7.x-1.5 for Drupal does not…Priority LOW 25The Commerce Commonwealth (CBA) module 7.x-1.x before 7.x-1.5 for Drupal does not properly validate payments, which allows remote attackers to make a failed payment appear valid via a crafted URL, related to a "response…CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01054 · Published 2015-09-17 · No fix listed CWE-20
