| Package | Affected versions | Patched versions |
|---|---|---|
| configured commerce | < 5.2.2408 | 5.2.2408 |
An issue was discovered in Optimizely Configured Commerce before 5.2.2408. A medium-severity issue exists in requests for resources where the session token is submitted as a URL parameter. This exposes information about the authenticated session, which can be leveraged for session hijacking.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free