CVE-2024-39407 | Adobe Commerce/Magento Open Source up to 2.4.4-p9/2.4.5-p8/2.4.6-p6/2.4.7-p1 improper authorization (apsb24-61)

A vulnerability was found in Adobe Commerce and Magento Open Source up to 2.4.4-p9/2.4.5-p8/2.4.6-p6/2.4.7-p1. It has been declared as critical. This vulnerability affects unknown code. The manipulation leads to improper authorization.

This vulnerability was named CVE-2024-39407. The attack can be initiated remotely. There is no exploit available.

It is recommended to upgrade the affected component.