Threats tagged 'ghsa-7r99-8wqp-h7pc'

Magento project community edition versions up to certain patched releases suffer from a path traversal vulnerability (CVE-2024-39399) that allows a low-privileged attacker to read arbitrary files outside restricted directories without user interaction. This vulnerability affects multiple versions including 2.4.4 through 2.4.7 and earlier. The issue has been fixed in patch releases 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, and 2.4.4-p10.