CVE-2025-3474

The Drupal Panels module (versions before 4.9.0 ) is vulnerable to a Missing Authentication for Critical Function (CWE-306) flaw. The module fails to sufficiently protect sensitive routes, allowing an attacker to view and modify blocks within variants without appropriate permissions. While the vu...