PT-2025-17215 · Unknown · Commercify

David P.S. Abraham + 1 · Published 2025-04-17 · Updated 2025-04-19 · CVE-2025-29722

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Commercify version 1.0

Description A CSRF issue allows remote attackers to perform unauthorized actions on behalf of authenticated users due to missing CSRF protection on sensitive endpoints.

Recommendations For Commercify version 1.0, consider implementing CSRF protection on all sensitive endpoints to prevent unauthorized actions. As a temporary workaround, restrict access to sensitive endpoints until a patch is available.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2025-29722

Affected Products

Commercify

References · 7

• 🔥 https://github.com/cypherdavy/CVE-2025-29722 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-29722 · Security Note
• https://osv.dev/vulnerability/CVE-2025-29722 · Vendor Advisory
• https://github.com/yassmittal/Commercify · Note
• https://t.me/cvedetector/23270 · Telegram Post
• https://t.me/cvetracker/21881 · Telegram Post
• https://twitter.com/CVEnew/status/1913455530451833097 · Twitter Post