Optimizely Configured Commerce Account Creation Vulnerability in B2B Application

A vulnerability exists in Optimizely Configured Commerce versions prior to 5.2.2408, where the B2B application does not require email confirmation for newly created accounts. This issue allows for the mass creation of accounts, potentially impacting database storage and leading to the creation of unsolicited storefront accounts on behalf of visitors.

Impact

The vulnerability could be exploited to create multiple accounts without email verification, potentially leading to an accumulation of unverified accounts in the database and the creation of accounts on behalf of visitors in the storefront.