CVE-2024-39418 | Adobe Commerce/Magento Open Source up to 2.4.4-p9/2.4.5-p8/2.4.6-p6/2.4.7-p1 improper authorization (apsb24-61)

A vulnerability classified as critical has been found in Adobe Commerce and Magento Open Source up to 2.4.4-p9/2.4.5-p8/2.4.6-p6/2.4.7-p1. Affected is an unknown function. The manipulation leads to improper authorization.

This vulnerability is traded as CVE-2024-39418. It is possible to launch the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.