CVE-2025-8996

The Drupal Layout Builder Advanced Permissions module (versions 0.0.0 through 2.1.9 ) is vulnerable to a Missing Authorization flaw (CWE-862). This vulnerability allows for Forceful Browsing because the module does not sufficiently control access for adding sections in the submodule. While the ri...