[MEDIUM] Magento Open Source allows SQL Injection

PKSA-98pv-wqj5-bh4w CVE-2023-38250 GHSA-h3g9-cwr6-hphx

Affected package: magento/community-edition

Affected version: >=2.4.4-p1,<2.4.4-p6|>=2.4.5-p1,<2.4.5-p5|>=2.4.6-p1,<2.4.6-p3|=2.4.4|=2.4.5|=2.4.6|=2.4.7|=2.4.7-beta1

Reported by:
GitHub