GHSA-4gp9-ff99-j6vj
GitHub Security Advisory
Umbraco CMS Improper Access Control Vulnerability Allows Low-Privilege Users to Access Webhook API
✓ GitHub Reviewed
LOW
Has CVE
Advisory Details
### Impact
An improper access control issue has been identified, allowing low-privilege users to access the webhook API and retrieve information that should be restricted to users with access to the settings section
Affected Packages
NuGet
Umbraco.CMS
Affected versions:
14.0.0
(fixed in 14.3.0)
Related CVEs
Key Information
2.5
/10
Dataset
Last updated: September 13, 2025 6:30 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.