CVE-2025-3474

CVE-2025-3474 concerns the Drupal Panels module for Drupal. A missing authentication for a critical function creates bad access control, affecting Panels versions 0.0.0 through 4.9.0. The vulnerability can allow an attacker to view and modify blocks within variants without proper permissions, as ...