deardaniel/secdata-raw huggingface dataset:
GitHub Security Advisory: GHSA-2r94-wm5v-4prx
Package: magento/community-edition (COMPOSER)
Severity: LOW (CVSS 2.7)
CWE: CWE-522: Insufficiently Protected Credentials
Vulnerable versions: = 2.4.4
Patched in: unpatched

Summary: Magento does not properly protect credentials

Details:
Magento versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Insufficiently Protected Credentials vulnerability that could lead to a security feature bypass. A high privileged attacker could exploit this vulnerability to gain unauthorized access to protected resources by obtaining sensitive credential information. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-2r94-wm5v-4prx
Package: magento/community-edition (COMPOSER)
Severity: LOW (CVSS 2.7)
CWE: CWE-522: Insufficiently Protected Credentials
Vulnerable versions: = 2.4.5
Patched in: unpatched

Summary: Magento does not properly protect credentials

Details:
Magento versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Insufficiently Protected Credentials vulnerability that could lead to a security feature bypass. A high privileged attacker could exploit this vulnerability to gain unauthorized access to protected resources by obtaining sensitive credential information. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-2r94-wm5v-4prx
Package: magento/community-edition (COMPOSER)
Severity: LOW (CVSS 2.7)
CWE: CWE-522: Insufficiently Protected Credentials
Vulnerable versions: >= 2.4.8-beta1, < 2.4.8-beta2
Patched in: 2.4.8-beta2

Summary: Magento does not properly protect credentials

Details:
Magento versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Insufficiently Protected Credentials vulnerability that could lead to a security feature bypass. A high privileged attacker could exploit this vulnerability to gain unauthorized access to protected resources by obtaining sensitive credential information. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-2r94-wm5v-4prx
Package: magento/community-edition (COMPOSER)
Severity: LOW (CVSS 2.7)
CWE: CWE-522: Insufficiently Protected Credentials
Vulnerable versions: < 2.4.4-p13
Patched in: 2.4.4-p13

Summary: Magento does not properly protect credentials

Details:
Magento versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Insufficiently Protected Credentials vulnerability that could lead to a security feature bypass. A high privileged attacker could exploit this vulnerability to gain unauthorized access to protected resources by obtaining sensitive credential information. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-2r94-wm5v-4prx
Package: magento/community-edition (COMPOSER)
Severity: LOW (CVSS 2.7)
CWE: CWE-522: Insufficiently Protected Credentials
Vulnerable versions: >= 2.4.5-p1, < 2.4.5-p12
Patched in: 2.4.5-p12

Summary: Magento does not properly protect credentials

Details:
Magento versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Insufficiently Protected Credentials vulnerability that could lead to a security feature bypass. A high privileged attacker could exploit this vulnerability to gain unauthorized access to protected resources by obtaining sensitive credential information. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-2r94-wm5v-4prx
Package: magento/community-edition (COMPOSER)
Severity: LOW (CVSS 2.7)
CWE: CWE-522: Insufficiently Protected Credentials
Vulnerable versions: >= 2.4.6-p1, < 2.4.6-p10
Patched in: 2.4.6-p10

Summary: Magento does not properly protect credentials

Details:
Magento versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Insufficiently Protected Credentials vulnerability that could lead to a security feature bypass. A high privileged attacker could exploit this vulnerability to gain unauthorized access to protected resources by obtaining sensitive credential information. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-2r94-wm5v-4prx
Package: magento/community-edition (COMPOSER)
Severity: LOW (CVSS 2.7)
CWE: CWE-522: Insufficiently Protected Credentials
Vulnerable versions: >= 2.4.7-beta1, < 2.4.7-p5
Patched in: 2.4.7-p5

Summary: Magento does not properly protect credentials

Details:
Magento versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Insufficiently Protected Credentials vulnerability that could lead to a security feature bypass. A high privileged attacker could exploit this vulnerability to gain unauthorized access to protected resources by obtaining sensitive credential information. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-2r94-wm5v-4prx
Package: magento/project-community-edition (COMPOSER)
Severity: LOW (CVSS 2.7)
CWE: CWE-522: Insufficiently Protected Credentials
Vulnerable versions: <= 2.0.2
Patched in: unpatched

Summary: Magento does not properly protect credentials

Details:
Magento versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Insufficiently Protected Credentials vulnerability that could lead to a security feature bypass. A high privileged attacker could exploit this vulnerability to gain unauthorized access to protected resources by obtaining sensitive credential information. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-vhcq-4xrm-2cr2
Package: magento/community-edition (COMPOSER)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-284: Improper Access Control
Vulnerable versions: = 2.4.7
Patched in: unpatched

Summary: Magento Improper Access Control leads to Security feature bypass

Details:
Magento versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-vhcq-4xrm-2cr2
Package: magento/community-edition (COMPOSER)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-284: Improper Access Control
Vulnerable versions: = 2.4.6
Patched in: unpatched

Summary: Magento Improper Access Control leads to Security feature bypass

Details:
Magento versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-vhcq-4xrm-2cr2
Package: magento/community-edition (COMPOSER)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-284: Improper Access Control
Vulnerable versions: = 2.4.4
Patched in: unpatched

Summary: Magento Improper Access Control leads to Security feature bypass

Details:
Magento versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-vhcq-4xrm-2cr2
Package: magento/community-edition (COMPOSER)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-284: Improper Access Control
Vulnerable versions: = 2.4.5
Patched in: unpatched

Summary: Magento Improper Access Control leads to Security feature bypass

Details:
Magento versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-vhcq-4xrm-2cr2
Package: magento/community-edition (COMPOSER)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-284: Improper Access Control
Vulnerable versions: >= 2.4.8-beta1, < 2.4.8-beta2
Patched in: 2.4.8-beta2

Summary: Magento Improper Access Control leads to Security feature bypass

Details:
Magento versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-vhcq-4xrm-2cr2
Package: magento/community-edition (COMPOSER)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-284: Improper Access Control
Vulnerable versions: < 2.4.4-p13
Patched in: 2.4.4-p13

Summary: Magento Improper Access Control leads to Security feature bypass

Details:
Magento versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-vhcq-4xrm-2cr2
Package: magento/community-edition (COMPOSER)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-284: Improper Access Control
Vulnerable versions: >= 2.4.5-p1, < 2.4.5-p12
Patched in: 2.4.5-p12

Summary: Magento Improper Access Control leads to Security feature bypass

Details:
Magento versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-vhcq-4xrm-2cr2
Package: magento/community-edition (COMPOSER)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-284: Improper Access Control
Vulnerable versions: >= 2.4.6-p1, < 2.4.6-p10
Patched in: 2.4.6-p10

Summary: Magento Improper Access Control leads to Security feature bypass

Details:
Magento versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-vhcq-4xrm-2cr2
Package: magento/community-edition (COMPOSER)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-284: Improper Access Control
Vulnerable versions: >= 2.4.7-beta1, < 2.4.7-p5
Patched in: 2.4.7-p5

Summary: Magento Improper Access Control leads to Security feature bypass

Details:
Magento versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-vhcq-4xrm-2cr2
Package: magento/project-community-edition (COMPOSER)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-284: Improper Access Control
Vulnerable versions: <= 2.0.2
Patched in: unpatched

Summary: Magento Improper Access Control leads to Security feature bypass

Details:
Magento versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-6wq7-cg9h-mj6q
Package: magento/community-edition (COMPOSER)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-284: Improper Access Control
Vulnerable versions: = 2.4.7
Patched in: unpatched

Summary: Magento Improper Access Control leads to Security feature bypass

Details:
Magento versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-6wq7-cg9h-mj6q
Package: magento/community-edition (COMPOSER)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-284: Improper Access Control
Vulnerable versions: = 2.4.6
Patched in: unpatched

Summary: Magento Improper Access Control leads to Security feature bypass

Details:
Magento versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-6wq7-cg9h-mj6q
Package: magento/community-edition (COMPOSER)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-284: Improper Access Control
Vulnerable versions: = 2.4.4
Patched in: unpatched

Summary: Magento Improper Access Control leads to Security feature bypass

Details:
Magento versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-6wq7-cg9h-mj6q
Package: magento/community-edition (COMPOSER)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-284: Improper Access Control
Vulnerable versions: = 2.4.5
Patched in: unpatched

Summary: Magento Improper Access Control leads to Security feature bypass

Details:
Magento versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-6wq7-cg9h-mj6q
Package: magento/community-edition (COMPOSER)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-284: Improper Access Control
Vulnerable versions: >= 2.4.8-beta1, < 2.4.8-beta2
Patched in: 2.4.8-beta2

Summary: Magento Improper Access Control leads to Security feature bypass

Details:
Magento versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-6wq7-cg9h-mj6q
Package: magento/community-edition (COMPOSER)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-284: Improper Access Control
Vulnerable versions: < 2.4.4-p13
Patched in: 2.4.4-p13

Summary: Magento Improper Access Control leads to Security feature bypass

Details:
Magento versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-6wq7-cg9h-mj6q
Package: magento/community-edition (COMPOSER)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-284: Improper Access Control
Vulnerable versions: >= 2.4.5-p1, < 2.4.5-p12
Patched in: 2.4.5-p12

Summary: Magento Improper Access Control leads to Security feature bypass

Details:
Magento versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-6wq7-cg9h-mj6q
Package: magento/community-edition (COMPOSER)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-284: Improper Access Control
Vulnerable versions: >= 2.4.6-p1, < 2.4.6-p10
Patched in: 2.4.6-p10

Summary: Magento Improper Access Control leads to Security feature bypass

Details:
Magento versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-6wq7-cg9h-mj6q
Package: magento/community-edition (COMPOSER)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-284: Improper Access Control
Vulnerable versions: >= 2.4.7-beta1, < 2.4.7-p5
Patched in: 2.4.7-p5

Summary: Magento Improper Access Control leads to Security feature bypass

Details:
Magento versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-6wq7-cg9h-mj6q
Package: magento/project-community-edition (COMPOSER)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-284: Improper Access Control
Vulnerable versions: <= 2.0.2
Patched in: unpatched

Summary: Magento Improper Access Control leads to Security feature bypass

Details:
Magento versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-g2pj-xmxq-3r9q
Package: magento/community-edition (COMPOSER)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-284: Improper Access Control
Vulnerable versions: = 2.4.8
Patched in: unpatched

Summary: Magento Improper Access Control leads to security feature bypass

Details:
Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain limited write access. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-g2pj-xmxq-3r9q
Package: magento/community-edition (COMPOSER)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-284: Improper Access Control
Vulnerable versions: = 2.4.7
Patched in: unpatched

Summary: Magento Improper Access Control leads to security feature bypass

Details:
Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain limited write access. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-g2pj-xmxq-3r9q
Package: magento/community-edition (COMPOSER)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-284: Improper Access Control
Vulnerable versions: = 2.4.6
Patched in: unpatched

Summary: Magento Improper Access Control leads to security feature bypass

Details:
Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain limited write access. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-g2pj-xmxq-3r9q
Package: magento/community-edition (COMPOSER)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-284: Improper Access Control
Vulnerable versions: = 2.4.5
Patched in: unpatched

Summary: Magento Improper Access Control leads to security feature bypass

Details:
Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain limited write access. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-g2pj-xmxq-3r9q
Package: magento/community-edition (COMPOSER)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-284: Improper Access Control
Vulnerable versions: < 2.4.5-p13
Patched in: 2.4.5-p13

Summary: Magento Improper Access Control leads to security feature bypass

Details:
Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain limited write access. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-g2pj-xmxq-3r9q
Package: magento/community-edition (COMPOSER)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-284: Improper Access Control
Vulnerable versions: >= 2.4.6-p1, < 2.4.6-p11
Patched in: 2.4.6-p11

Summary: Magento Improper Access Control leads to security feature bypass

Details:
Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain limited write access. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-g2pj-xmxq-3r9q
Package: magento/community-edition (COMPOSER)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-284: Improper Access Control
Vulnerable versions: >= 2.4.7-beta1, < 2.4.7-p6
Patched in: 2.4.7-p6

Summary: Magento Improper Access Control leads to security feature bypass

Details:
Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain limited write access. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-g2pj-xmxq-3r9q
Package: magento/project-community-edition (COMPOSER)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-284: Improper Access Control
Vulnerable versions: <= 2.0.2
Patched in: unpatched

Summary: Magento Improper Access Control leads to security feature bypass

Details:
Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain limited write access. Exploitation of this issue does not require user interaction.