{
  "affected": [
    {
      "database_specific": {
        "affected_versions": "\u003c2.27.0"
      },
      "package": {
        "ecosystem": "Packagist:https://packages.drupal.org/8",
        "name": "drupal/commerce"
      },
      "ranges": [
        {
          "database_specific": {
            "constraint": "\u003c2.27.0"
          },
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.27.0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "severity": []
    }
  ],
  "aliases": [],
  "credits": [
    {
      "contact": [
        "https://www.drupal.org/user/3541248"
      ],
      "name": "Sasanka Jandhyala"
    }
  ],
  "details": "This module provides a system for building an ecommerce solution in their Drupal site.\n\nThe module doesn\u0027t sufficiently verify access to profile data in certain circumstances.\n\nThis vulnerability is mitigated by the fact that an attacker must have permission to perform the checkout operation.",
  "id": "DRUPAL-CONTRIB-2021-032",
  "modified": "2023-08-11T17:04:59.000Z",
  "published": "2021-09-22T16:51:57.000Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://www.drupal.org/sa-contrib-2021-032"
    }
  ],
  "schema_version": "1.7.0"
}