CVE-2025-8361

The Drupal Config Pages module (versions 0.0.0 through 2.17.9 ) is vulnerable to a missing authorization flaw. The root cause is that the module fails to sufficiently check access permissions because it does not account for hook_ENTITY_TYPE_access(). This allows for forceful browsing of config pa...