CVE-2025-8996

The Drupal Layout Builder Advanced Permissions module (versions 0.0.0 to 2.1.9 ) is vulnerable to a Missing Authorization issue, which allows for Forceful Browsing . The root cause is that the module does not sufficiently control access for adding sections in the submodule. While an attacker must...

CVE-2025-8996 Layout Builder Advanced Permissions - Moderately critical - Access bypass - SA-CONTRIB-2025-097

Missing Authorization vulnerability in Drupal Layout Builder Advanced Permissions allows Forceful Browsing.This issue affects Layout Builder Advanced Permissions: from 0.0.0 before 2.2.0...

CVE-2025-8996: Missing Authorization

Missing Authorization vulnerability in Drupal Layout Builder Advanced Permissions allows Forceful Browsing.This issue affects Layout Builder Advanced Permissions: from 0.0.0 before 2.2.0...