[MEDIUM] Magento allows incorrect authorization

PKSA-xbxj-3c74-rztg CVE-2025-54265 GHSA-r355-75hw-r8jf

Affected package: magento/community-edition

Affected version: =2.4.6|=2.4.7|=2.4.8|<2.4.6-p13|>=2.4.7-beta1,<2.4.7-p8|>=2.4.8-beta1,<2.4.8-p3|>=2.4.9-alpha1,<2.4.9-alpha3

Reported by:
GitHub