[MEDIUM] Magento Open Source Path Traversal vulnerability

PKSA-dw79-2frq-sm6h CVE-2024-39406 GHSA-6pxh-2557-5cj5

Affected package: magento/community-edition

Affected version: =2.4.4|<2.4.4-p10|=2.4.5|>=2.4.5-p1,<2.4.5-p9|=2.4.6|>=2.4.6-p1,<2.4.6-p7|=2.4.7|>=2.4.7-p1,<2.4.7-p2

Reported by:
GitHub