low
CVE-2024-48925
Umbraco CMS Improper Access Control Vulnerability Allows Low-Privilege Users to Access Webhook API
Impact
### Impact An improper access control issue has been identified, allowing low-privilege users to access the webhook API and retrieve information that should be restricted to users with access to the settings section
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| nuget | Umbraco.CMS | >= 14.0.0, < 14.3.0 | 14.3.0 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Umbraco | Umbraco Cms | from 14.0.0 before 14.3.0 |