CVE-2024-39404 | Adobe Commerce/Magento Open Source up to 2.4.4-p9/2.4.5-p8/2.4.6-p6/2.4.7-p1 improper authorization (apsb24-61)

A vulnerability was found in Adobe Commerce and Magento Open Source up to 2.4.4-p9/2.4.5-p8/2.4.6-p6/2.4.7-p1 and classified as critical. Affected by this issue is some unknown functionality. The manipulation leads to improper authorization.

This vulnerability is handled as CVE-2024-39404. The attack may be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.