deardaniel/secdata-raw huggingface dataset:
GitHub Security Advisory: GHSA-8frp-pxq2-3gpq
Package: magento/community-edition (COMPOSER)
Severity: HIGH (CVSS 8.4)
CWE: CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Vulnerable versions: = 2.4.5
Patched in: unpatched

Summary: Magento OS Command ('OS Command Injection') vulnerability

Details:
Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could lead in arbitrary code execution by an admin attacker. Exploitation of this issue requires user interaction and scope is changed.
GitHub Security Advisory: GHSA-8frp-pxq2-3gpq
Package: magento/community-edition (COMPOSER)
Severity: HIGH (CVSS 8.4)
CWE: CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Vulnerable versions: = 2.4.6
Patched in: unpatched

Summary: Magento OS Command ('OS Command Injection') vulnerability

Details:
Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could lead in arbitrary code execution by an admin attacker. Exploitation of this issue requires user interaction and scope is changed.
GitHub Security Advisory: GHSA-8frp-pxq2-3gpq
Package: magento/community-edition (COMPOSER)
Severity: HIGH (CVSS 8.4)
CWE: CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Vulnerable versions: = 2.4.7
Patched in: unpatched

Summary: Magento OS Command ('OS Command Injection') vulnerability

Details:
Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could lead in arbitrary code execution by an admin attacker. Exploitation of this issue requires user interaction and scope is changed.
GitHub Security Advisory: GHSA-8frp-pxq2-3gpq
Package: magento/community-edition (COMPOSER)
Severity: HIGH (CVSS 8.4)
CWE: CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Vulnerable versions: >= 2.4.4-p1, < 2.4.4-p10
Patched in: 2.4.4-p10

Summary: Magento OS Command ('OS Command Injection') vulnerability

Details:
Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could lead in arbitrary code execution by an admin attacker. Exploitation of this issue requires user interaction and scope is changed.
GitHub Security Advisory: GHSA-8frp-pxq2-3gpq
Package: magento/community-edition (COMPOSER)
Severity: HIGH (CVSS 8.4)
CWE: CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Vulnerable versions: >= 2.4.5-p1, < 2.4.5-p9
Patched in: 2.4.5-p9

Summary: Magento OS Command ('OS Command Injection') vulnerability

Details:
Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could lead in arbitrary code execution by an admin attacker. Exploitation of this issue requires user interaction and scope is changed.
GitHub Security Advisory: GHSA-8frp-pxq2-3gpq
Package: magento/community-edition (COMPOSER)
Severity: HIGH (CVSS 8.4)
CWE: CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Vulnerable versions: >= 2.4.6-p1, < 2.4.6-p7
Patched in: 2.4.6-p7

Summary: Magento OS Command ('OS Command Injection') vulnerability

Details:
Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could lead in arbitrary code execution by an admin attacker. Exploitation of this issue requires user interaction and scope is changed.
GitHub Security Advisory: GHSA-8frp-pxq2-3gpq
Package: magento/community-edition (COMPOSER)
Severity: HIGH (CVSS 8.4)
CWE: CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Vulnerable versions: >= 2.4.7-beta1, < 2.4.7-p2
Patched in: 2.4.7-p2

Summary: Magento OS Command ('OS Command Injection') vulnerability

Details:
Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could lead in arbitrary code execution by an admin attacker. Exploitation of this issue requires user interaction and scope is changed.
GitHub Security Advisory: GHSA-8frp-pxq2-3gpq
Package: magento/project-community-edition (COMPOSER)
Severity: HIGH (CVSS 8.4)
CWE: CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Vulnerable versions: <= 2.0.2
Patched in: unpatched

Summary: Magento OS Command ('OS Command Injection') vulnerability

Details:
Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could lead in arbitrary code execution by an admin attacker. Exploitation of this issue requires user interaction and scope is changed.
GitHub Security Advisory: GHSA-5g9f-7gqc-8hj4
Package: magento/community-edition (COMPOSER)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-285: Improper Authorization
Vulnerable versions: = 2.4.4
Patched in: unpatched

Summary: Magento Improper Authorization vulnerability

Details:
Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and modify minor information. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-5g9f-7gqc-8hj4
Package: magento/community-edition (COMPOSER)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-285: Improper Authorization
Vulnerable versions: = 2.4.5
Patched in: unpatched

Summary: Magento Improper Authorization vulnerability

Details:
Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and modify minor information. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-5g9f-7gqc-8hj4
Package: magento/community-edition (COMPOSER)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-285: Improper Authorization
Vulnerable versions: = 2.4.6
Patched in: unpatched

Summary: Magento Improper Authorization vulnerability

Details:
Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and modify minor information. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-5g9f-7gqc-8hj4
Package: magento/community-edition (COMPOSER)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-285: Improper Authorization
Vulnerable versions: = 2.4.7
Patched in: unpatched

Summary: Magento Improper Authorization vulnerability

Details:
Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and modify minor information. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-5g9f-7gqc-8hj4
Package: magento/community-edition (COMPOSER)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-285: Improper Authorization
Vulnerable versions: >= 2.4.4-p1, < 2.4.4-p10
Patched in: 2.4.4-p10

Summary: Magento Improper Authorization vulnerability

Details:
Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and modify minor information. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-5g9f-7gqc-8hj4
Package: magento/community-edition (COMPOSER)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-285: Improper Authorization
Vulnerable versions: >= 2.4.5-p1, < 2.4.5-p9
Patched in: 2.4.5-p9

Summary: Magento Improper Authorization vulnerability

Details:
Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and modify minor information. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-5g9f-7gqc-8hj4
Package: magento/community-edition (COMPOSER)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-285: Improper Authorization
Vulnerable versions: >= 2.4.6-p1, < 2.4.6-p7
Patched in: 2.4.6-p7

Summary: Magento Improper Authorization vulnerability

Details:
Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and modify minor information. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-5g9f-7gqc-8hj4
Package: magento/community-edition (COMPOSER)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-285: Improper Authorization
Vulnerable versions: >= 2.4.7-beta1, < 2.4.7-p2
Patched in: 2.4.7-p2

Summary: Magento Improper Authorization vulnerability

Details:
Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and modify minor information. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-5g9f-7gqc-8hj4
Package: magento/project-community-edition (COMPOSER)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-285: Improper Authorization
Vulnerable versions: <= 2.0.2
Patched in: unpatched

Summary: Magento Improper Authorization vulnerability

Details:
Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and modify minor information. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-qrh3-vxjg-h9h6
Package: magento/community-edition (COMPOSER)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-285: Improper Authorization
Vulnerable versions: = 2.4.4
Patched in: unpatched

Summary: Magento Improper Authorization vulnerability

Details:
Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and modify minor information. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-qrh3-vxjg-h9h6
Package: magento/community-edition (COMPOSER)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-285: Improper Authorization
Vulnerable versions: = 2.4.5
Patched in: unpatched

Summary: Magento Improper Authorization vulnerability

Details:
Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and modify minor information. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-qrh3-vxjg-h9h6
Package: magento/community-edition (COMPOSER)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-285: Improper Authorization
Vulnerable versions: = 2.4.6
Patched in: unpatched

Summary: Magento Improper Authorization vulnerability

Details:
Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and modify minor information. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-qrh3-vxjg-h9h6
Package: magento/community-edition (COMPOSER)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-285: Improper Authorization
Vulnerable versions: = 2.4.7
Patched in: unpatched

Summary: Magento Improper Authorization vulnerability

Details:
Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and modify minor information. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-qrh3-vxjg-h9h6
Package: magento/community-edition (COMPOSER)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-285: Improper Authorization
Vulnerable versions: >= 2.4.4-p1, < 2.4.4-p10
Patched in: 2.4.4-p10

Summary: Magento Improper Authorization vulnerability

Details:
Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and modify minor information. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-qrh3-vxjg-h9h6
Package: magento/community-edition (COMPOSER)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-285: Improper Authorization
Vulnerable versions: >= 2.4.5-p1, < 2.4.5-p9
Patched in: 2.4.5-p9

Summary: Magento Improper Authorization vulnerability

Details:
Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and modify minor information. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-qrh3-vxjg-h9h6
Package: magento/community-edition (COMPOSER)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-285: Improper Authorization
Vulnerable versions: >= 2.4.6-p1, < 2.4.6-p7
Patched in: 2.4.6-p7

Summary: Magento Improper Authorization vulnerability

Details:
Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and modify minor information. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-qrh3-vxjg-h9h6
Package: magento/community-edition (COMPOSER)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-285: Improper Authorization
Vulnerable versions: >= 2.4.7-beta1, < 2.4.7-p2
Patched in: 2.4.7-p2

Summary: Magento Improper Authorization vulnerability

Details:
Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and modify minor information. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-qrh3-vxjg-h9h6
Package: magento/project-community-edition (COMPOSER)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-285: Improper Authorization
Vulnerable versions: <= 2.0.2
Patched in: unpatched

Summary: Magento Improper Authorization vulnerability

Details:
Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and modify minor information. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-gvgf-pvh5-vjh4
Package: magento/community-edition (COMPOSER)
Severity: MODERATE (CVSS 5.4)
CWE: CWE-285: Improper Authorization
Vulnerable versions: = 2.4.4
Patched in: unpatched

Summary: Magento Improper Authorization vulnerability

Details:
Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures to view and edit low-sensitivity information. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-gvgf-pvh5-vjh4
Package: magento/community-edition (COMPOSER)
Severity: MODERATE (CVSS 5.4)
CWE: CWE-285: Improper Authorization
Vulnerable versions: = 2.4.5
Patched in: unpatched

Summary: Magento Improper Authorization vulnerability

Details:
Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures to view and edit low-sensitivity information. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-gvgf-pvh5-vjh4
Package: magento/community-edition (COMPOSER)
Severity: MODERATE (CVSS 5.4)
CWE: CWE-285: Improper Authorization
Vulnerable versions: = 2.4.6
Patched in: unpatched

Summary: Magento Improper Authorization vulnerability

Details:
Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures to view and edit low-sensitivity information. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-gvgf-pvh5-vjh4
Package: magento/community-edition (COMPOSER)
Severity: MODERATE (CVSS 5.4)
CWE: CWE-285: Improper Authorization
Vulnerable versions: = 2.4.7
Patched in: unpatched

Summary: Magento Improper Authorization vulnerability

Details:
Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures to view and edit low-sensitivity information. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-gvgf-pvh5-vjh4
Package: magento/community-edition (COMPOSER)
Severity: MODERATE (CVSS 5.4)
CWE: CWE-285: Improper Authorization
Vulnerable versions: >= 2.4.4-p1, < 2.4.4-p10
Patched in: 2.4.4-p10

Summary: Magento Improper Authorization vulnerability

Details:
Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures to view and edit low-sensitivity information. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-gvgf-pvh5-vjh4
Package: magento/community-edition (COMPOSER)
Severity: MODERATE (CVSS 5.4)
CWE: CWE-285: Improper Authorization
Vulnerable versions: >= 2.4.5-p1, < 2.4.5-p9
Patched in: 2.4.5-p9

Summary: Magento Improper Authorization vulnerability

Details:
Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures to view and edit low-sensitivity information. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-gvgf-pvh5-vjh4
Package: magento/community-edition (COMPOSER)
Severity: MODERATE (CVSS 5.4)
CWE: CWE-285: Improper Authorization
Vulnerable versions: >= 2.4.6-p1, < 2.4.6-p7
Patched in: 2.4.6-p7

Summary: Magento Improper Authorization vulnerability

Details:
Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures to view and edit low-sensitivity information. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-gvgf-pvh5-vjh4
Package: magento/community-edition (COMPOSER)
Severity: MODERATE (CVSS 5.4)
CWE: CWE-285: Improper Authorization
Vulnerable versions: >= 2.4.7-beta1, < 2.4.7-p2
Patched in: 2.4.7-p2

Summary: Magento Improper Authorization vulnerability

Details:
Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures to view and edit low-sensitivity information. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-gvgf-pvh5-vjh4
Package: magento/project-community-edition (COMPOSER)
Severity: MODERATE (CVSS 5.4)
CWE: CWE-285: Improper Authorization
Vulnerable versions: <= 2.0.2
Patched in: unpatched

Summary: Magento Improper Authorization vulnerability

Details:
Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures to view and edit low-sensitivity information. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-8w5f-8992-g86j
Package: magento/community-edition (COMPOSER)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-285: Improper Authorization
Vulnerable versions: = 2.4.4
Patched in: unpatched

Summary: Magento Improper Authorization vulnerability

Details:
Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and disclose minor information. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-8w5f-8992-g86j
Package: magento/community-edition (COMPOSER)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-285: Improper Authorization
Vulnerable versions: = 2.4.5
Patched in: unpatched

Summary: Magento Improper Authorization vulnerability

Details:
Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and disclose minor information. Exploitation of this issue does not require user interaction.