Business Logic Vulnerability in Optimizely Configured Commerce
CVE-2025-22384
Currently unrated
What is CVE-2025-22384?
In Optimizely Configured Commerce prior to version 5.2.2408, a vulnerability exists within the B2B application that compromises business logic functionality. This issue enables storefront visitors to circumvent normal purchasing restrictions and acquire discontinued products under specific conditions. The vulnerability arises from the manipulation of requests before they are processed by the server, resulting in unintended access to products no longer available for sale. This poses significant risks to businesses relying on the integrity of their product offerings.