silverstripe/sapphire — pull request #1181 by chillu (2013-02-12 22:24:06+00:00)
Title: API Require ADMIN for ?showtemplate=1 (2.4)

Doesn't expose sensitive data (to my knowledge), but still an information leak, so low-priority security issue.