Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-3474 DRUPAL-CONTRIB-2025-033EUVD-2025-10534GHSA-j95m-vcjc-hm79

Panels - Critical - Access bypass - SA-CONTRIB-2025-033

Published Apr 9, 2025 · Updated Apr 9, 2025 · Assigned by drupal

Description

Missing Authentication for Critical Function vulnerability in Drupal Panels allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Panels: from 0.0.0 before 4.9.0.

Affected products

VendorProductAffectedFixed
Drupal Panels 0.0.0 – < 4.9.0 4.9.0

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/panels < 4.9.0 4.9.0 DRUPAL-CONTRIB-2025-033

Advisories 1

References