Threats tagged 'ghsa-qrh3-vxjg-h9h6'

Magento project community edition versions up to 2.4.7-p1 and earlier are affected by an improper authorization vulnerability (CVE-2024-39404). This flaw allows a low-privileged attacker to bypass security features and modify minor information without user interaction. The vulnerability has a medium severity score of 4.3 and affects multiple patched and unpatched versions. Fixed versions are available starting from 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, and 2.4.4-p10.