CVE-2020-24407

CVE-2020-24407 affects Magento Open Source 2.4.x and 2.3.5p1 and earlier, with an unsafe file upload that enables arbitrary code execution when performed by authenticated admins with access to System/Data and Transfer/Import components. The issue is documented across multiple feeds (including OSV...