CVE-2024-45125

Name of the Vulnerable Software and Affected Versions Adobe Commerce versions 2.4.7-p2 through 2.4.4-p10 and earlier Magento Open Source versions 2.4.7-p2 through 2.4.4-p10 and earlier

Description The issue is related to incorrect authorization, which could result in a security feature bypass. A low-privileged attacker could exploit this to have a low impact on integrity. Exploitation of this issue does not require user interaction.

Recommendations For Adobe Commerce versions 2.4.7-p2 through 2.4.4-p10 and earlier, update to a version that fixes the incorrect authorization vulnerability. For Magento Open Source versions 2.4.7-p2 through 2.4.4-p10 and earlier, update to a version that fixes the incorrect authorization vulnerability. As a temporary workaround, consider restricting access to sensitive features that rely on authorization until a patch is available.