CVE-2025-22387

An issue was discovered in Optimizely Configured Commerce before 5.2.2408. A medium-severity issue exists in requests for resources where the session token is submitted as a URL parameter. This exposes information about the authenticated session, which can be leveraged for session hijacking...

CVE-2025-22387

creationtimestamp| type| source ---|---|--- 2025-01-04 02:23:56+00:00| seen| https://infosec.exchange/users/cve/statuses/113767706077728976 2025-01-04 03:53:12+00:00| seen| https://t.me/cvedetector/14254...

CVE-2025-22387

Optimizely Configured Commerce versions prior to 5.2.2408 are vulnerable to a medium-severity issue where session tokens are submitted as URL parameters during requests for resources. This insecure practice exposes authenticated session information, which can be leveraged by an attacker to perfor...