Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass Flaw

Drupal is warning of a highly critical security flaw in its Commerce Core component that is being actively exploited by threat actors. The vulnerability is related to missing authorization and affects various versions of Commerce Core. Specifically, versions from 0.0.0 to 2.41 and from 3.0.0 to 3.3.13 are impacted. The Commerce Core component is used to enable the sale of goods and services through a shopping cart. The vulnerability has been assigned a CVE identifier, but its CVSS score is not available.