Security Advisory

CVE-2025-22384

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-01-04 00:00:00
Last updated 2025-01-06 17:02:30
Assigner mitre
State PUBLISHED

Description

An issue was discovered in Optimizely Configured Commerce before 5.2.2408. A medium-severity issue concerning business logic exists in the Commerce B2B application, which allows storefront visitors to purchase discontinued products in specific scenarios where requests are altered before reaching the server.