Missing Authorization Vulnerability in Drupal Layout Builder Advanced Permissions

Post Reply
Shane1145
Posts: 1624
Joined: Wed Sep 25, 2024 2:31 pm

Missing Authorization Vulnerability in Drupal Layout Builder Advanced Permissions

Post by Shane1145 »

A missing authorization vulnerability in Drupal's Layout Builder Advanced Permissions component allows attackers to perform forceful browsing. This can lead to unauthorized access to sensitive content or functionality within the affected versions, specifically those prior to 2.2.0. It is crucial for users to update to the latest version to secure their installations against potential exploitation.

https://securityvulnerability.io/vulner ... -2025-8996
Post Reply