Vulnerabilidades de Centarro
CVEs publicadas que afetam produtos de Centarro: 3 registro(s), com severidade, exploração e correções.
CVE-2026-81159
Baixa · 3.7
CWE-208 02/09/2026
Observable Timing Discrepancy vulnerability in Drupal Commerce CyberSource allows Brute…
Observable Timing Discrepancy vulnerability in Drupal Commerce CyberSource allows Brute Force. This issue affects Commerce CyberSource versions: from 0.0.0 to 1.10.0.
CVE-2026-73475
Crítica · 9.1
CWE-863 02/09/2026
Incorrect Authorization em Centarro Commerce Paypal
Incorrect Authorization vulnerability in Drupal Commerce PayPal allows Forceful Browsing. This issue affects Commerce PayPal versions: from 0.0.0 to 1.12.0, from 2.0.0 to 2.1.3.
CVE-2026-10769
Média · 5.4
CWE-79 10/07/2026
Commerce Core - Moderately critical - Cross site scripting - SA-CONTRIB-2026-041
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Commerce Core allows Stored XSS. This issue affects Commerce Core versions: from 3.3.0 to 3.3.6.