Kentico Xperience 13 before 13.0.216 lacks object-level authorization checks for administration API endpoints.Referenceshttps://www.kentico.com/platformhttps://devnet.kentico.com/download/hotfixes
