Umbraco Allows Improper API Access Control to Low-Privilege Users to Data Type Functionality
An improper API access control issue has been identified, allowing low-privilege, authenticated users to create and update data type information that should be restricted to users with access to the settings section.