[HIGH] Magento is affected by an os command injection via the Data collection endpoint

PKSA-8f3p-62qz-tqg4 CVE-2021-36024 GHSA-qmq6-jpvg-j547

Affected package: magento/community-edition

Affected version: =2.4.2|>=2.4.2-p1,<2.4.2-p2|=2.3.7|<2.3.7-p1

Reported by:
GitHub