Description
Editors/LogViewerController.cs in Umbraco through 8.9.1 allows a user to visit a logviewer endpoint even if they lack Applications.Settings access.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| NuGet | UmbracoCms | < 8.10.0 | 8.10.0 | GHSA-4vp3-vfww-8648 |