[MEDIUM] Magento Improper Authorization vulnerability

PKSA-pd5g-z9m9-j3v5 CVE-2024-39418 GHSA-gvgf-pvh5-vjh4

Affected package: magento/community-edition

Affected version: =2.4.4|=2.4.5|=2.4.6|=2.4.7|>=2.4.4-p1,<2.4.4-p10|>=2.4.5-p1,<2.4.5-p9|>=2.4.6-p1,<2.4.6-p7|>=2.4.7-beta1,<2.4.7-p2

Reported by:
GitHub