CVE-2025-8996
Layout Builder Advanced Permissions - Moderately critical - Access bypass - SA-CONTRIB-2025-097
Résumé
Layout Builder Advanced Permissions - Moderately critical - Access bypass - SA-CONTRIB-2025-097
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Missing Authorization vulnerability in Drupal Layout Builder Advanced Permissions allows Forceful Browsing.This issue affects Layout Builder Advanced Permissions: from 0.0.0 before 2.2.0.
Paquets affectés
Packagist:https://packages.drupal.org/8
drupal/layout_builder_perms
[{"type":"ECOSYSTEM","events":[{"introduced":"2.2.0"},{"last_affected":"2.2.0"}],"database_specific":{"constraint":"2.2.0"}}]
Références
- advisory github.com
- advisory nvd.nist.gov
- web drupal.org
- web git.drupalcode.org
- web drupal.org