CVE-2025-8996

The Drupal Layout Builder Advanced Permissions module (versions 0.0.0 to 2.1.9 ) is vulnerable to a Missing Authorization issue, which allows for Forceful Browsing . The root cause is that the module does not sufficiently control access for adding sections in the submodule. While an attacker must...