[MEDIUM] Magento Improper Authorization leads to Security feature bypass

PKSA-ym4p-zvby-x7kh CVE-2024-39416 GHSA-4xgg-rw35-7mv5

Affected package: magento/community-edition

Affected version: =2.4.7|=2.4.6|=2.4.5|=2.4.4|<2.4.4-p10|>=2.4.5-p1,<2.4.5-p9|>=2.4.6-p1,<2.4.6-p7|>=2.4.7-beta1,<2.4.7-p2

Reported by:
GitHub