Drupal · Drupal Layout Builder Advanced Permissions · CVE-2025-8996
Name of the Vulnerable Software and Affected Versions:
Drupal Layout Builder Advanced Permissions versions 0.0.0 through 2.1.9
Description:
Missing authorization allows forceful browsing in Drupal Layout Builder Advanced Permissions.
Recommendations:
Update to version 2.2.0 or later.