Threats tagged 'ghsa-5g9f-7gqc-8hj4'

Magento project community edition versions up to 2.4.7-p1 and earlier are affected by an improper authorization vulnerability (CVE-2024-39405). This flaw allows a low-privileged attacker to bypass security controls and modify minor information without requiring user interaction. The vulnerability has a medium severity score of 4.3 and affects multiple patched versions prior to 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, and 2.4.4-p10.