Security

Forceful Browsing

Forceful browsing is an attack technique in which a client requests a route or resource directly instead of following the links an application offers, reaching functions that lack proper authorization checks.

Deep dive

Learn Article

How to Audit Drupal Commerce Orders for Fraud

Audit Drupal Commerce orders for fraud after CVE-2026-118539: check for unpaid orders, false paid totals, price overrides and added adjustments.

intermediate 5 min read

Back to glossary