CVE-2025-22384

An issue was discovered in Optimizely Configured Commerce before 5.2.2408. A medium-severity issue concerning business logic exists in the Commerce B2B application, which allows storefront visitors to purchase discontinued products in specific scenarios where requests are altered before reaching...

CVE-2025-22384

A business logic vulnerability exists in Optimizely Configured Commerce prior to version 5.2.2408 . The flaw is located within the Commerce B2B application , where storefront visitors can purchase discontinued products under specific scenarios if requests are altered before reaching the server. T...