CVE-2025-22384

7.5HIGH

An issue was discovered in Optimizely Configured Commerce before 5.2.2408. A medium-severity issue concerning business logic exists in the Commerce B2B application, which allows storefront visitors to

Published: 1/4/2025Updated: 5/20/2025
View on NVDView on MITRE

Description

An issue was discovered in Optimizely Configured Commerce before 5.2.2408. A medium-severity issue concerning business logic exists in the Commerce B2B application, which allows storefront visitors to purchase discontinued products in specific scenarios where requests are altered before reaching the server.

AI AnalysisPowered by AI

Affected Products

optimizelyconfigured_commerce

References