Threats tagged 'ghsa-cjm6-8mw8-2f8c'

Magento Project Community Edition versions up to 2.4.7-p1 and earlier are affected by an Improper Authorization vulnerability (CVE-2024-39407). This flaw allows a low-privileged attacker to bypass security controls and modify minor information without requiring user interaction. The vulnerability has a medium severity score of 4.3 and impacts several patched versions prior to 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, and 2.4.4-p10.