—0.0
GHSA-4gp9-ff99-j6vj
Umbraco CMS Improper Access Control Vulnerability Allows Low-Privilege Users to Access Webhook API
Quick fix
GHSA-4gp9-ff99-j6vj — Umbraco.CMS: upgrade to the fixed version with the command below.
dotnet add package Umbraco.CMS --version 14.3.0Details
### Impact An improper access control issue has been identified, allowing low-privilege users to access the webhook API and retrieve information that should be restricted to users with access to the settings section
Are you affected?
Enter the version of the package you're using.
Affected packages
NuGet/Umbraco.CMS
Introduced in:
14.0.0Fixed in: 14.3.0Fix
dotnet add package Umbraco.CMS --version 14.3.0