[CRITICAL] Magento improper access control vulnerability within Magento's Media Gallery Upload workflow

PKSA-9bmk-r19v-6qhr CVE-2021-36036 GHSA-wqr6-wv6c-p8fx

Affected package: magento/community-edition

Affected version: =2.4.2|>=2.4.2-p1,<2.4.2-p2|=2.3.7|<2.3.7-p1

Reported by:
GitHub