GHSA-mxc9-g6m4-2v35 Magento Open Source allows Improper Neutralization of Special Elements Used

• Packagist magento/community-edition: 2.4.6 (no fix yet) • Packagist magento/community-edition: 2.4.5 (no fix yet) • Packagist magento/community-edition: 2.4.4 (no fix yet) • Packagist magento/community-edition: >= 2.4.6-p1, < 2.4.6-p2 → fixed in 2.4.6-p2 • Packagist magento/community-edition: >= 2.4.5-p1, < 2.4.5-p4 → fixed in 2.4.5-p4 • Packagist magento/community-edition: >= 2.4.4-p1, < 2.4.4-p5 → fixed in 2.4.4-p5 • Packagist magento/project-community-edition: <= 2.0.2 (no fix yet)

Adobe Commerce versions 2.4.6-p1 (and earlier), 2.4.5-p3 (and earlier) and 2.4.4-p4 (and earlier) are affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could lead to arbitrary code execution by an admin-privilege authenticated attacker. Exploitation of this issue does not require user interaction.