Lucene search
K

4 matches found

OSV
OSV
β€’added 2025/09/03 4:15 p.m.β€’3 views

DRUPAL-CONTRIB-2025-105

This module enables you to connect a Drupal site to the Acquia DAM service, which syncs media from the third party service to the site. The module doesn't sufficiently validate authorization to a list of DAM assets currently synced to the website creating an access bypass vulnerability. This...

7.5CVSS6.6AI score0.00053EPSS
Exploits0References1
OSV
OSV
β€’added 2024/06/05 4:45 p.m.β€’3 views

DRUPAL-CONTRIB-2024-025

Acquia DAM provides a connection to a third-party asset management system, allowing for images to be managed, linked to, and viewed from Drupal. In order for assets to be managed in Drupal, a site administrator must first authenticate the site to their DAM instance. The module doesn't sufficientl...

3.5CVSS6.6AI score0.00072EPSS
Exploits0References1
Positive Technologies
Positive Technologies
β€’added 2024/06/05 12:0 a.m.β€’4 views

PT-2024-10363 Β· Acquia Β· Acquia Dam

Name of the Vulnerable Software and Affected Versions: Acquia DAM versions 0.0.0 through 1.0.12 Acquia DAM versions 1.1.0 through 1.1.0-beta2 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability in the Acquia DAM module of the Drupal CMS system. This vulnerability...

5.5CVSS7.6AI score0.00072EPSS
Exploits0References5
Patchstack
Patchstack
β€’added 2024/06/05 12:0 a.m.β€’2 views

Drupal Acquia DAM module < 1.0.13,1.1.0-1.1.0-beta2 - Unauthenticated Multiple Vulnerabilities

Unauthenticated Multiple Vulnerabilities discovered by Matt Glaman in WordPress Module Acquia DAM versions 1.0.13,1.1.0-1.1.0-beta2...

7AI score
Exploits0References1Affected Software1
Rows per page
Query Builder