Lucene search
+L

25 matches found

Github Security Blog
Github Security Blog
•added 2025/10/30 12:31 a.m.•20 views

Drupal Acquia DAM allows Forceful Browsing

Missing Authorization vulnerability in Drupal Acquia DAM allows Forceful Browsing. This issue affects Acquia DAM: from 0.0.0 before 1.1.5...

7AI score0.00286EPSS
SaveExploits0References3Affected Software1
EUVD
EUVD
•added 2025/10/30 12:31 a.m.•14 views

EUVD-2025-36881

Drupal Acquia DAM allows Forceful Browsing...

7.5CVSS6.4AI score0.00286EPSS
SaveExploits0References2
OSV
OSV
•added 2025/10/30 12:31 a.m.•17 views

GHSA-X957-32V9-M7VG Drupal Acquia DAM allows Forceful Browsing

Missing Authorization vulnerability in Drupal Acquia DAM allows Forceful Browsing. This issue affects Acquia DAM: from 0.0.0 before 1.1.5...

7.5CVSS7AI score0.00286EPSS
SaveExploits0References2
NVD
NVD
•added 2025/10/30 12:15 a.m.•16 views

CVE-2025-9954

Missing Authorization vulnerability in Drupal Acquia DAM allows Forceful Browsing.This issue affects Acquia DAM: from 0.0.0 before 1.1.5...

7.5CVSS0.00286EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/10/30 12:00 a.m.•17 views

Drupal Acquia DAM 安全漏洞

Drupal Acquia DAM is a data synchronization plugin for the Drupal community. A security vulnerability exists in Drupal Acquia DAM versions prior to 1.1.5, which stems from a lack of authorization and could lead to a forced browsing attack...

7.5CVSS6.5AI score0.00286EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/10/29 11:12 p.m.•7 views

CVE-2025-9954 Acquia DAM - Moderately critical - Access bypass, Information Disclosure - SA-CONTRIB-2025-105

Missing Authorization vulnerability in Drupal Acquia DAM allows Forceful Browsing.This issue affects Acquia DAM: from 0.0.0 before 1.1.5...

6.6AI score0.00286EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/29 11:12 p.m.•29 views

CVE-2025-9954

Drupal Acquia DAM (versions 0.0.0 through 1.1.4) is vulnerable to an access bypass and information disclosure due to a missing authorization check. The module fails to sufficiently validate permissions for a list of DAM assets currently synced to the website, which allows for forceful browsing at...

6.6AI score0.00286EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2025/10/29 11:12 p.m.•14 views

CVE-2025-9954 Acquia DAM - Moderately critical - Access bypass, Information Disclosure - SA-CONTRIB-2025-105

Missing Authorization vulnerability in Drupal Acquia DAM allows Forceful Browsing.This issue affects Acquia DAM: from 0.0.0 before 1.1.5...

7.5CVSS5.9AI score
SaveExploits0References5
Cvelist
Cvelist
•added 2025/10/29 11:12 p.m.•20 views

CVE-2025-9954 Acquia DAM - Moderately critical - Access bypass, Information Disclosure - SA-CONTRIB-2025-105

Missing Authorization vulnerability in Drupal Acquia DAM allows Forceful Browsing.This issue affects Acquia DAM: from 0.0.0 before 1.1.5...

0.00286EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2024-51475

Malicious code in bioql PyPI...

3.5CVSS6.6AI score0.00146EPSS
SaveExploits0References1
OSV
OSV
•added 2025/09/03 4:15 p.m.•15 views

DRUPAL-CONTRIB-2025-105

This module enables you to connect a Drupal site to the Acquia DAM service, which syncs media from the third party service to the site. The module doesn't sufficiently validate authorization to a list of DAM assets currently synced to the website creating an access bypass vulnerability. This...

6.6AI score0.00286EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/09/03 12:00 a.m.•16 views

Drupal Acquia DAM module < 1.1.5 - Unauthenticated Multiple Vulnerabilities vulnerability

Unauthenticated Multiple Vulnerabilities vulnerability discovered by Brandon Goodwin bgoodie in WordPress Module Acquia DAM versions 1.1.5...

7.5CVSS7AI score0.00286EPSS
SaveExploits0References1Affected Software1
Drupal
Drupal
•added 2025/09/03 12:00 a.m.•24 views

Acquia DAM - Moderately critical - Access bypass, Information Disclosure - SA-CONTRIB-2025-105

This module enables you to connect a Drupal site to the Acquia DAM service, which syncs media from the third party service to the site. The module doesn't sufficiently validate authorization to a list of DAM assets currently synced to the website creating an access bypass vulnerability. This...

7.5CVSS5.4AI score0.00286EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2025/01/29 12:00 a.m.•14 views

The vulnerability of Acquia DAM CMS system’s Drupal module, related to the manipulation of cross-site requests, allows attackers to perform CSRF attacks or cause service failures.

The vulnerability of Acquia DAM CMS system’s Drupal module is related to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack or cause service failures...

5.5CVSS5.2AI score0.00146EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2025/01/09 8:15 p.m.•29 views

CVE-2024-13261

Cross-Site Request Forgery CSRF vulnerability in Drupal Acquia DAM allows Cross Site Request Forgery.This issue affects Acquia DAM: from 0.0.0 before 1.0.13, from 1.1.0 before 1.1.0-beta3...

3.5CVSS0.00146EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/09 7:14 p.m.•62 views

CVE-2024-13261

The Acquia DAM module for the Drupal CMS system is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability. This issue stems from the module's insufficient protection of the functionality that allows a site to be disconnected from the DAM instance. A remote attacker could exploit this to ...

6.7AI score0.00146EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2025/01/09 7:14 p.m.•10 views

CVE-2024-13261 Acquia DAM - Moderately critical - Cross Site Request Forgery, Denial of Service - SA-CONTRIB-2024-025

Cross-Site Request Forgery CSRF vulnerability in Drupal Acquia DAM allows Cross Site Request Forgery.This issue affects Acquia DAM: from 0.0.0 before 1.0.13, from 1.1.0 before 1.1.0-beta3...

3.5CVSS5.9AI score
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2025/01/09 7:14 p.m.•11 views

CVE-2024-13261 Acquia DAM - Moderately critical - Cross Site Request Forgery, Denial of Service - SA-CONTRIB-2024-025

Cross-Site Request Forgery CSRF vulnerability in Drupal Acquia DAM allows Cross Site Request Forgery.This issue affects Acquia DAM: from 0.0.0 before 1.0.13, from 1.1.0 before 1.1.0-beta3...

4.1AI score0.00146EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/09 7:14 p.m.•32 views

CVE-2024-13261 Acquia DAM - Moderately critical - Cross Site Request Forgery, Denial of Service - SA-CONTRIB-2024-025

Cross-Site Request Forgery CSRF vulnerability in Drupal Acquia DAM allows Cross Site Request Forgery.This issue affects Acquia DAM: from 0.0.0 before 1.0.13, from 1.1.0 before 1.1.0-beta3...

0.00146EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/09 12:00 a.m.•12 views

Drupal 安全漏洞

Drupal is an open source content management system developed in the PHP language by the Drupal community. A security vulnerability exists in Drupal Acquia DAM version 1.0.13, prior to versions 1.1.0 through 1.1.0-beta3, which stems from the inclusion of a cross-site request forgery vulnerability...

3.5CVSS6.6AI score0.00146EPSS
SaveExploits0References2
Rows per page
Query Builder