Security Advisory

CVE-2025-22385

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-01-04 00:00:00

Last updated 2025-01-06 15:13:34

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

An issue was discovered in Optimizely Configured Commerce before 5.2.2408. For newly created accounts, the Commerce B2B application does not require email confirmation. This medium-severity issue allows the mass creation of accounts. This could affect database storage; also, non-requested storefront accounts can be created on behalf of visitors.

← Browse all CVEs View on cve.org ↗