[MEDIUM] Magento Open Source allows Improper Authorization

PKSA-bjs7-4spx-mkj7 CVE-2023-38220 GHSA-grc6-r6f8-xj7c

Affected package: magento/project-community-edition

Affected version: <=2.0.2

Reported by:
GitHub