Threats tagged 'ghsa-8w5f-8992-g86j'

Magento project community edition versions up to certain patched releases contain an improper authorization vulnerability (CVE-2024-39413) that allows a low-privileged attacker to bypass security features and disclose minor information without user interaction. The vulnerability affects multiple versions including 2.4.4 through 2.4.7 and earlier patched releases. A fix is available in later patch releases.