deardaniel/secdata-raw huggingface dataset:
GitHub Security Advisory: GHSA-r487-9vv5-75gg
Package: magento/community-edition (COMPOSER)
Severity: HIGH (CVSS 8.2)
CWE: CWE-285: Improper Authorization
Vulnerable versions: = 2.4.8
Patched in: unpatched

Summary: Magento Improper Authorization leading to security feature bypass

Details:
Magento versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access leading to a limited impact to confidentiality and a high impact to integrity. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-r487-9vv5-75gg
Package: magento/community-edition (COMPOSER)
Severity: HIGH (CVSS 8.2)
CWE: CWE-285: Improper Authorization
Vulnerable versions: = 2.4.7
Patched in: unpatched

Summary: Magento Improper Authorization leading to security feature bypass

Details:
Magento versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access leading to a limited impact to confidentiality and a high impact to integrity. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-r487-9vv5-75gg
Package: magento/community-edition (COMPOSER)
Severity: HIGH (CVSS 8.2)
CWE: CWE-285: Improper Authorization
Vulnerable versions: = 2.4.6
Patched in: unpatched

Summary: Magento Improper Authorization leading to security feature bypass

Details:
Magento versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access leading to a limited impact to confidentiality and a high impact to integrity. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-r487-9vv5-75gg
Package: magento/community-edition (COMPOSER)
Severity: HIGH (CVSS 8.2)
CWE: CWE-285: Improper Authorization
Vulnerable versions: = 2.4.5
Patched in: unpatched

Summary: Magento Improper Authorization leading to security feature bypass

Details:
Magento versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access leading to a limited impact to confidentiality and a high impact to integrity. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-r487-9vv5-75gg
Package: magento/community-edition (COMPOSER)
Severity: HIGH (CVSS 8.2)
CWE: CWE-285: Improper Authorization
Vulnerable versions: < 2.4.5-p13
Patched in: 2.4.5-p13

Summary: Magento Improper Authorization leading to security feature bypass

Details:
Magento versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access leading to a limited impact to confidentiality and a high impact to integrity. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-r487-9vv5-75gg
Package: magento/community-edition (COMPOSER)
Severity: HIGH (CVSS 8.2)
CWE: CWE-285: Improper Authorization
Vulnerable versions: >= 2.4.6-p1, < 2.4.6-p11
Patched in: 2.4.6-p11

Summary: Magento Improper Authorization leading to security feature bypass

Details:
Magento versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access leading to a limited impact to confidentiality and a high impact to integrity. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-r487-9vv5-75gg
Package: magento/community-edition (COMPOSER)
Severity: HIGH (CVSS 8.2)
CWE: CWE-285: Improper Authorization
Vulnerable versions: >= 2.4.7-beta1, < 2.4.7-p6
Patched in: 2.4.7-p6

Summary: Magento Improper Authorization leading to security feature bypass

Details:
Magento versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access leading to a limited impact to confidentiality and a high impact to integrity. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-r487-9vv5-75gg
Package: magento/project-community-edition (COMPOSER)
Severity: HIGH (CVSS 8.2)
CWE: CWE-285: Improper Authorization
Vulnerable versions: <= 2.0.2
Patched in: unpatched

Summary: Magento Improper Authorization leading to security feature bypass

Details:
Magento versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access leading to a limited impact to confidentiality and a high impact to integrity. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-85jx-x9r4-45m2
Package: magento/community-edition (COMPOSER)
Severity: LOW (CVSS 2.7)
CWE: CWE-863: Incorrect Authorization
Vulnerable versions: = 2.4.8
Patched in: unpatched

Summary: Magento Authenticated Security feature bypass

Details:
Magento versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A high-privileged attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized access. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-85jx-x9r4-45m2
Package: magento/community-edition (COMPOSER)
Severity: LOW (CVSS 2.7)
CWE: CWE-863: Incorrect Authorization
Vulnerable versions: = 2.4.7
Patched in: unpatched

Summary: Magento Authenticated Security feature bypass

Details:
Magento versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A high-privileged attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized access. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-85jx-x9r4-45m2
Package: magento/community-edition (COMPOSER)
Severity: LOW (CVSS 2.7)
CWE: CWE-863: Incorrect Authorization
Vulnerable versions: = 2.4.6
Patched in: unpatched

Summary: Magento Authenticated Security feature bypass

Details:
Magento versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A high-privileged attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized access. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-85jx-x9r4-45m2
Package: magento/community-edition (COMPOSER)
Severity: LOW (CVSS 2.7)
CWE: CWE-863: Incorrect Authorization
Vulnerable versions: = 2.4.5
Patched in: unpatched

Summary: Magento Authenticated Security feature bypass

Details:
Magento versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A high-privileged attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized access. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-85jx-x9r4-45m2
Package: magento/community-edition (COMPOSER)
Severity: LOW (CVSS 2.7)
CWE: CWE-863: Incorrect Authorization
Vulnerable versions: < 2.4.5-p13
Patched in: 2.4.5-p13

Summary: Magento Authenticated Security feature bypass

Details:
Magento versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A high-privileged attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized access. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-85jx-x9r4-45m2
Package: magento/community-edition (COMPOSER)
Severity: LOW (CVSS 2.7)
CWE: CWE-863: Incorrect Authorization
Vulnerable versions: >= 2.4.6-p1, < 2.4.6-p11
Patched in: 2.4.6-p11

Summary: Magento Authenticated Security feature bypass

Details:
Magento versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A high-privileged attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized access. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-85jx-x9r4-45m2
Package: magento/community-edition (COMPOSER)
Severity: LOW (CVSS 2.7)
CWE: CWE-863: Incorrect Authorization
Vulnerable versions: >= 2.4.7-beta1, < 2.4.7-p6
Patched in: 2.4.7-p6

Summary: Magento Authenticated Security feature bypass

Details:
Magento versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A high-privileged attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized access. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-85jx-x9r4-45m2
Package: magento/project-community-edition (COMPOSER)
Severity: LOW (CVSS 2.7)
CWE: CWE-863: Incorrect Authorization
Vulnerable versions: <= 2.0.2
Patched in: unpatched

Summary: Magento Authenticated Security feature bypass

Details:
Magento versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A high-privileged attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized access. Exploitation of this issue does not require user interaction.
GitHub Security Advisory: GHSA-8hcx-xvww-6c6h
Package: magento/community-edition (COMPOSER)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-863: Incorrect Authorization
Vulnerable versions: = 2.4.8
Patched in: unpatched

Summary: Magento Security feature bypass

Details:
Magento versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized access. Exploitation of this issue requires user interaction.
GitHub Security Advisory: GHSA-8hcx-xvww-6c6h
Package: magento/community-edition (COMPOSER)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-863: Incorrect Authorization
Vulnerable versions: = 2.4.7
Patched in: unpatched

Summary: Magento Security feature bypass

Details:
Magento versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized access. Exploitation of this issue requires user interaction.
GitHub Security Advisory: GHSA-8hcx-xvww-6c6h
Package: magento/community-edition (COMPOSER)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-863: Incorrect Authorization
Vulnerable versions: = 2.4.6
Patched in: unpatched

Summary: Magento Security feature bypass

Details:
Magento versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized access. Exploitation of this issue requires user interaction.
GitHub Security Advisory: GHSA-8hcx-xvww-6c6h
Package: magento/community-edition (COMPOSER)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-863: Incorrect Authorization
Vulnerable versions: = 2.4.5
Patched in: unpatched

Summary: Magento Security feature bypass

Details:
Magento versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized access. Exploitation of this issue requires user interaction.
GitHub Security Advisory: GHSA-8hcx-xvww-6c6h
Package: magento/community-edition (COMPOSER)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-863: Incorrect Authorization
Vulnerable versions: < 2.4.5-p13
Patched in: 2.4.5-p13

Summary: Magento Security feature bypass

Details:
Magento versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized access. Exploitation of this issue requires user interaction.
GitHub Security Advisory: GHSA-8hcx-xvww-6c6h
Package: magento/community-edition (COMPOSER)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-863: Incorrect Authorization
Vulnerable versions: >= 2.4.6-p1, < 2.4.6-p11
Patched in: 2.4.6-p11

Summary: Magento Security feature bypass

Details:
Magento versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized access. Exploitation of this issue requires user interaction.
GitHub Security Advisory: GHSA-8hcx-xvww-6c6h
Package: magento/community-edition (COMPOSER)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-863: Incorrect Authorization
Vulnerable versions: >= 2.4.7-beta1, < 2.4.7-p6
Patched in: 2.4.7-p6

Summary: Magento Security feature bypass

Details:
Magento versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized access. Exploitation of this issue requires user interaction.
GitHub Security Advisory: GHSA-8hcx-xvww-6c6h
Package: magento/project-community-edition (COMPOSER)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-863: Incorrect Authorization
Vulnerable versions: <= 2.0.2
Patched in: unpatched

Summary: Magento Security feature bypass

Details:
Magento versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized access. Exploitation of this issue requires user interaction.
GitHub Security Advisory: GHSA-5777-jj7p-mpqw
Package: magento/community-edition (COMPOSER)
Severity: HIGH (CVSS 8.1)
CWE: CWE-352: Cross-Site Request Forgery (CSRF)
Vulnerable versions: = 2.4.8
Patched in: unpatched

Summary: Magento Cross-Site Request Forgery (CSRF) vulnerability

Details:
Magento versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by a Cross-Site Request Forgery (CSRF) vulnerability that could result in privilege escalation. A high-privileged attacker could trick a victim into executing unintended actions on a web application where the victim is authenticated, potentially allowing unauthorized access or modification of sensitive data. Exploitation of this issue requires user interaction in that a victim must visit a malicious website or click on a crafted link. Scope is changed.
GitHub Security Advisory: GHSA-5777-jj7p-mpqw
Package: magento/community-edition (COMPOSER)
Severity: HIGH (CVSS 8.1)
CWE: CWE-352: Cross-Site Request Forgery (CSRF)
Vulnerable versions: = 2.4.7
Patched in: unpatched

Summary: Magento Cross-Site Request Forgery (CSRF) vulnerability

Details:
Magento versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by a Cross-Site Request Forgery (CSRF) vulnerability that could result in privilege escalation. A high-privileged attacker could trick a victim into executing unintended actions on a web application where the victim is authenticated, potentially allowing unauthorized access or modification of sensitive data. Exploitation of this issue requires user interaction in that a victim must visit a malicious website or click on a crafted link. Scope is changed.
GitHub Security Advisory: GHSA-5777-jj7p-mpqw
Package: magento/community-edition (COMPOSER)
Severity: HIGH (CVSS 8.1)
CWE: CWE-352: Cross-Site Request Forgery (CSRF)
Vulnerable versions: = 2.4.6
Patched in: unpatched

Summary: Magento Cross-Site Request Forgery (CSRF) vulnerability

Details:
Magento versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by a Cross-Site Request Forgery (CSRF) vulnerability that could result in privilege escalation. A high-privileged attacker could trick a victim into executing unintended actions on a web application where the victim is authenticated, potentially allowing unauthorized access or modification of sensitive data. Exploitation of this issue requires user interaction in that a victim must visit a malicious website or click on a crafted link. Scope is changed.
GitHub Security Advisory: GHSA-5777-jj7p-mpqw
Package: magento/community-edition (COMPOSER)
Severity: HIGH (CVSS 8.1)
CWE: CWE-352: Cross-Site Request Forgery (CSRF)
Vulnerable versions: = 2.4.5
Patched in: unpatched

Summary: Magento Cross-Site Request Forgery (CSRF) vulnerability

Details:
Magento versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by a Cross-Site Request Forgery (CSRF) vulnerability that could result in privilege escalation. A high-privileged attacker could trick a victim into executing unintended actions on a web application where the victim is authenticated, potentially allowing unauthorized access or modification of sensitive data. Exploitation of this issue requires user interaction in that a victim must visit a malicious website or click on a crafted link. Scope is changed.
GitHub Security Advisory: GHSA-5777-jj7p-mpqw
Package: magento/community-edition (COMPOSER)
Severity: HIGH (CVSS 8.1)
CWE: CWE-352: Cross-Site Request Forgery (CSRF)
Vulnerable versions: < 2.4.5-p14
Patched in: 2.4.5-p14

Summary: Magento Cross-Site Request Forgery (CSRF) vulnerability

Details:
Magento versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by a Cross-Site Request Forgery (CSRF) vulnerability that could result in privilege escalation. A high-privileged attacker could trick a victim into executing unintended actions on a web application where the victim is authenticated, potentially allowing unauthorized access or modification of sensitive data. Exploitation of this issue requires user interaction in that a victim must visit a malicious website or click on a crafted link. Scope is changed.
GitHub Security Advisory: GHSA-5777-jj7p-mpqw
Package: magento/community-edition (COMPOSER)
Severity: HIGH (CVSS 8.1)
CWE: CWE-352: Cross-Site Request Forgery (CSRF)
Vulnerable versions: >= 2.4.6-p1, < 2.4.6-p12
Patched in: 2.4.6-p12

Summary: Magento Cross-Site Request Forgery (CSRF) vulnerability

Details:
Magento versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by a Cross-Site Request Forgery (CSRF) vulnerability that could result in privilege escalation. A high-privileged attacker could trick a victim into executing unintended actions on a web application where the victim is authenticated, potentially allowing unauthorized access or modification of sensitive data. Exploitation of this issue requires user interaction in that a victim must visit a malicious website or click on a crafted link. Scope is changed.
GitHub Security Advisory: GHSA-5777-jj7p-mpqw
Package: magento/community-edition (COMPOSER)
Severity: HIGH (CVSS 8.1)
CWE: CWE-352: Cross-Site Request Forgery (CSRF)
Vulnerable versions: >= 2.4.7-beta1, < 2.4.7-p7
Patched in: 2.4.7-p7

Summary: Magento Cross-Site Request Forgery (CSRF) vulnerability

Details:
Magento versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by a Cross-Site Request Forgery (CSRF) vulnerability that could result in privilege escalation. A high-privileged attacker could trick a victim into executing unintended actions on a web application where the victim is authenticated, potentially allowing unauthorized access or modification of sensitive data. Exploitation of this issue requires user interaction in that a victim must visit a malicious website or click on a crafted link. Scope is changed.
GitHub Security Advisory: GHSA-5777-jj7p-mpqw
Package: magento/community-edition (COMPOSER)
Severity: HIGH (CVSS 8.1)
CWE: CWE-352: Cross-Site Request Forgery (CSRF)
Vulnerable versions: >= 2.4.8-beta1, < 2.4.8-p2
Patched in: 2.4.8-p2

Summary: Magento Cross-Site Request Forgery (CSRF) vulnerability

Details:
Magento versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by a Cross-Site Request Forgery (CSRF) vulnerability that could result in privilege escalation. A high-privileged attacker could trick a victim into executing unintended actions on a web application where the victim is authenticated, potentially allowing unauthorized access or modification of sensitive data. Exploitation of this issue requires user interaction in that a victim must visit a malicious website or click on a crafted link. Scope is changed.
GitHub Security Advisory: GHSA-5777-jj7p-mpqw
Package: magento/community-edition (COMPOSER)
Severity: HIGH (CVSS 8.1)
CWE: CWE-352: Cross-Site Request Forgery (CSRF)
Vulnerable versions: >= 2.4.9-alpha1, < 2.4.9-alpha2
Patched in: 2.4.9-alpha2

Summary: Magento Cross-Site Request Forgery (CSRF) vulnerability

Details:
Magento versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by a Cross-Site Request Forgery (CSRF) vulnerability that could result in privilege escalation. A high-privileged attacker could trick a victim into executing unintended actions on a web application where the victim is authenticated, potentially allowing unauthorized access or modification of sensitive data. Exploitation of this issue requires user interaction in that a victim must visit a malicious website or click on a crafted link. Scope is changed.