CVE-2021-28584

CVE-2021-28584 is a Magento path-traversal vulnerability affecting Magento Commerce/Open Source versions up to 2.4.2, 2.4.1-p1, and 2.3.6-p1. An authenticated admin can exploit a flaw when creating a store with a child theme to perform arbitrary file-system writes. The impact is authenticated acc...