[MEDIUM] Magento Improper Authorization leads to security feature bypass

PKSA-4jrq-qp4c-nqw3 CVE-2024-39411 GHSA-qm77-mqf3-fmhq

Affected package: magento/community-edition

Affected version: =2.4.7|=2.4.6|=2.4.5|=2.4.4|<2.4.4-p10|>=2.4.5-p1,<2.4.5-p9|>=2.4.6-p1,<2.4.6-p7|>=2.4.7-beta1,<2.4.7-p2

Reported by:
GitHub