CVE-2024-48925: Umbraco CMS Improper Access Control Vulnerability Allows Low-Privilege Users to Access Webhook API

October 22, 2024

An improper access control issue has been identified, allowing low-privilege users to access the webhook API and retrieve information that should be restricted to users with access to the settings section

References

github.com/advisories/GHSA-4gp9-ff99-j6vj
github.com/umbraco/Umbraco-CMS
github.com/umbraco/Umbraco-CMS/security/advisories/GHSA-4gp9-ff99-j6vj
nvd.nist.gov/vuln/detail/CVE-2024-48925

Code Behaviors & Features

Detect and mitigate CVE-2024-48925 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →