| Package | Affected versions | Patched versions |
|---|---|---|
| magento/community-edition | = 2.4.4= 2.4.5= 2.4.6= 2.4.7≥ 2.4.4-p1, < 2.4.4-p10≥ 2.4.5-p1, < 2.4.5-p9≥ 2.4.6-p1, < 2.4.6-p7≥ 2.4.7-beta1, < 2.4.7-p2 | 2.4.4-p102.4.5-p92.4.6-p72.4.7-p2 |
| magento/project-community-edition | ≤ 2.0.2 | |
| commerce | = 2.4.4= 2.4.5= 2.4.6= 2.4.7≤ 2.4.3 | |
| magento | = 2.4.4= 2.4.5= 2.4.6= 2.4.7≤ 2.4.3 |
Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures to view and edit low-sensitivity information. Exploitation of this issue does not require user interaction.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free