We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
An issue was discovered in Optimizely Configured Commerce before 5.2.2408. A medium-severity issue exists in requests for resources where the session token is submitted as a URL parameter. This exposes information about the authenticated session, which can be leveraged for session hijacking.
Reserved 2025-01-04 | Published 2025-01-04 | Updated 2025-01-06 | Assigner mitreCWE-598 Use of GET Request Method With Sensitive Query Strings
support.optimizely.com/...erce-Security-Advisory-COM-2024-06
Support options
