← Back to CVE List

CVE-2025-24875

Published: 2025-02-11T01:15Z
Last Modified: 2025-02-18T18:15Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
SAP Commerce, by default, sets certain cookies with the SameSite attribute configured to None (SameSite=None). This includes authentication cookies utilized in SAP Commerce Backoffice. Applying this setting reduces defense in depth against CSRF and may lead to future compatibility issues. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt