medium6.3
CVE-2025-29722
A CSRF vulnerability in Commercify v1.0 allows remote attackers to perform unauthorized actions on behalf of authenticated users.
Impact
A CSRF vulnerability in Commercify v1.0 allows remote attackers to perform unauthorized actions on behalf of authenticated users. The issue exists due to missing CSRF protection on sensitive endpoints.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Yassmittal | Commercify | Version 1.0 |