umbraco/umbraco-cms · Security
Umbraco CMS Improper Access Control Vulnerability Allows Low-Privilege Users to Access Webhook API
- GHSA ID
- GHSA-4gp9-ff99-j6vj
- CVE ID
- CVE-2024-48925
- Severity
- low
- Published
- Updated
- CVSS
- 0 · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N
- CVSS v3
- 0 · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N
Description
Impact
An improper access control issue has been identified, allowing low-privilege users to access the webhook API and retrieve information that should be restricted to users with access to the settings section
CWEs
- CWE-284 · Improper Access Control
- CWE-863 · Incorrect Authorization