CVE-2024-39413
An unauthorized user can export the Invoiced Sales Report
Summary
An unauthorized user can export the Invoiced Sales Report
Original description
The description as published by the source.
Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and disclose minor information. Exploitation of this issue does not require user interaction.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory helpx.adobe.com
- advisory nvd.nist.gov