[MEDIUM] Magento vulnerable to path traversal

PKSA-qxt1-qvkm-ccm7 CVE-2025-49559 GHSA-h4f4-gv6h-x824

Affected package: magento/project-community-edition

Affected version: <=2.0.2

Reported by:
GitHub