[MEDIUM] Magento Open Source Path Traversal vulnerability

PKSA-dw79-2frq-sm6h CVE-2024-39406 GHSA-6pxh-2557-5cj5

Affected version: =2.4.4|<2.4.4-p10|=2.4.5|>=2.4.5-p1,<2.4.5-p9|=2.4.6|>=2.4.6-p1,<2.4.6-p7|=2.4.7|>=2.4.7-p1,<2.4.7-p2

Reported by:
GitHub

[MEDIUM] Magento Open Source Cross-Site Request Forgery vulnerability

PKSA-dzsz-sjtm-vq7t CVE-2024-39408 GHSA-4cj6-f32v-6hgx

Affected version: =2.4.4|<2.4.4-p10|=2.4.5|>=2.4.5-p1,<2.4.5-p9|=2.4.6|>=2.4.6-p1,<2.4.6-p7|=2.4.7|>=2.4.7-p1,<2.4.7-p2

Reported by:
GitHub

[MEDIUM] Magento Open Source Cross-Site Request Forgery (CSRF) vulnerability

PKSA-8qcx-d884-ntny CVE-2024-39409 GHSA-rf4q-m23c-7q8r

Affected version: =2.4.4|<2.4.4-p10|=2.4.5|>=2.4.5-p1,<2.4.5-p9|=2.4.6|>=2.4.6-p1,<2.4.6-p7|=2.4.7|>=2.4.7-p1,<2.4.7-p2

Reported by:
GitHub

[MEDIUM] Magento Open Source Cross-Site Request Forgery (CSRF) vulnerability

PKSA-x9tz-w7x6-ncgm CVE-2024-39410 GHSA-4323-f82v-f6jr

Affected version: =2.4.4|<2.4.4-p10|=2.4.5|>=2.4.5-p1,<2.4.5-p9|=2.4.6|>=2.4.6-p1,<2.4.6-p7|=2.4.7|>=2.4.7-p1,<2.4.7-p2

Reported by:
GitHub

[MEDIUM] Magento Open Source Improper Authorization vulnerability

PKSA-sh88-myrv-9t1n CVE-2024-39412 GHSA-7472-vw39-g2j3

Affected version: =2.4.4|<2.4.4-p10|=2.4.5|>=2.4.5-p1,<2.4.5-p9|=2.4.6|>=2.4.6-p1,<2.4.6-p7|=2.4.7|>=2.4.7-p1,<2.4.7-p2

Reported by:
GitHub