Optimizely Configured Commerce Session Token Vulnerability in B2B Application

A medium-severity vulnerability has been identified in Optimizely Configured Commerce versions prior to 5.2.2408. This issue affects the B2B application and relates to session management in the storefront. The vulnerability allows session tokens from logged-out sessions to remain active and usable, potentially leading to unauthorized access.

Impact

Exploitation of this vulnerability could result in unauthorized use of session tokens, allowing access to resources or functionalities tied to those sessions.