CVE-2023-38218

Adobe Commerce versions 2.4.7-beta1 and earlier, 2.4.6-p2 and earlier, 2.4.5-p4 and earlier and 2.4.4-p5 and earlier are affected by an Incorrect Authorization . An authenticated attacker can exploit this to achieve information exposure and privilege escalation...

CVE-2023-38218

CVE-2023-38218 affects Adobe Commerce/Magento Open Source/Community Edition: versions 2.4.4-p5 and earlier up to 2.4.7-beta1 (and earlier) are vulnerable to Incorrect Authorization via the V1/customers/me endpoint, enabling an authenticated attacker to cause information exposure and privilege esc...