Threats tagged 'ghsa-q628-54wg-4r5q'

Magento project community edition versions up to 2.4.7-p1 and certain earlier patch versions contain a vulnerability that improperly restricts excessive authentication attempts. This flaw allows attackers to bypass security features designed to limit brute force login attempts, potentially leading to unauthorized account access. The vulnerability has a high complexity for exploitation and does not require user interaction. Fixed versions have been released to address this issue.