Drupal CivicTheme Design System versions before 1.12.0 contain an incorrect authorization vulnerability that allows forceful browsing. This flaw could enable unauthorized users to access restricted resources. The issue is fixed in version 1.12.0. The vulnerability has a high severity with a CVSS score of 7.5.