Lucene search
+L

29 matches found

Github Security Blog
Github Security Blog
•added 2025/10/30 12:31 a.m.•26 views

Drupal Acquia DAM allows Forceful Browsing

Missing Authorization vulnerability in Drupal Acquia DAM allows Forceful Browsing. This issue affects Acquia DAM: from 0.0.0 before 1.1.5...

7.5CVSS5.8AI score0.00307EPSS
SaveExploits0References3Affected Software1
osv_ghsa
osv_ghsa
•added 2025/10/30 12:31 a.m.•18 views

GHSA-X957-32V9-M7VG Drupal Acquia DAM allows Forceful Browsing

Missing Authorization vulnerability in Drupal Acquia DAM allows Forceful Browsing. This issue affects Acquia DAM: from 0.0.0 before 1.1.5...

7.5CVSS5.8AI score0.00307EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/30 12:31 a.m.•42 views

EUVD-2025-36881

Drupal Acquia DAM allows Forceful Browsing...

7.5CVSS5.8AI score0.00307EPSS
SaveExploits0References2
NVD
NVD
•added 2025/10/30 12:15 a.m.•21 views

CVE-2025-9954

Missing Authorization vulnerability in Drupal Acquia DAM allows Forceful Browsing.This issue affects Acquia DAM: from 0.0.0 before 1.1.5...

7.5CVSS0.00307EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/10/30 12:00 a.m.•3 views

PT-2025-45792

Missing Authorization vulnerability in Drupal Acquia DAM allows Forceful Browsing. This issue affects Acquia DAM: from 0.0.0 before 1.1.5...

7.5CVSS5.9AI score0.00307EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/30 12:00 a.m.•4 views

CVE-2025-9954: Missing Authorization

Missing Authorization vulnerability in Drupal Acquia DAM allows Forceful Browsing.This issue affects Acquia DAM: from 0.0.0 before 1.1.5...

7.5CVSS5.8AI score0.00307EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/10/30 12:00 a.m.•24 views

Drupal Acquia DAM 安全漏洞

Drupal Acquia DAM is a data synchronization plugin for the Drupal community. A security vulnerability exists in Drupal Acquia DAM versions prior to 1.1.5, which stems from a lack of authorization and could lead to a forced browsing attack...

7.5CVSS5.8AI score0.00307EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/29 11:12 p.m.•36 views

CVE-2025-9954

A missing authorization vulnerability exists in Drupal Acquia DAM (versions before 1.1.5 ). This security flaw allows for forceful browsing , which can lead to unauthorized access or information disclosure. No specific exploit details or remediation versions are provided in the documents beyond t...

7.5CVSS5.8AI score0.00307EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/10/29 11:12 p.m.•8 views

CVE-2025-9954 Acquia DAM - Moderately critical - Access bypass, Information Disclosure - SA-CONTRIB-2025-105

Missing Authorization vulnerability in Drupal Acquia DAM allows Forceful Browsing.This issue affects Acquia DAM: from 0.0.0 before 1.1.5...

5.8AI score0.00307EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/10/29 11:12 p.m.•23 views

CVE-2025-9954 Acquia DAM - Moderately critical - Access bypass, Information Disclosure - SA-CONTRIB-2025-105

Missing Authorization vulnerability in Drupal Acquia DAM allows Forceful Browsing.This issue affects Acquia DAM: from 0.0.0 before 1.1.5...

7.5CVSS5.9AI score
SaveExploits0References5
Cvelist
Cvelist
•added 2025/10/29 11:12 p.m.•27 views

CVE-2025-9954 Acquia DAM - Moderately critical - Access bypass, Information Disclosure - SA-CONTRIB-2025-105

Missing Authorization vulnerability in Drupal Acquia DAM allows Forceful Browsing.This issue affects Acquia DAM: from 0.0.0 before 1.1.5...

0.00307EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•24 views

EUVD-2024-51475

Malicious code in bioql PyPI...

3.5CVSS5.4AI score0.0015EPSS
SaveExploits0References1
osv_drupal
osv_drupal
•added 2025/09/03 4:15 p.m.•22 views

DRUPAL-CONTRIB-2025-105

This module enables you to connect a Drupal site to the Acquia DAM service, which syncs media from the third party service to the site. The module doesn't sufficiently validate authorization to a list of DAM assets currently synced to the website creating an access bypass vulnerability. This...

7.5CVSS6.6AI score0.00307EPSS
SaveExploits0References1
Drupal
Drupal
•added 2025/09/03 12:00 a.m.•31 views

Acquia DAM - Moderately critical - Access bypass, Information Disclosure - SA-CONTRIB-2025-105

This module enables you to connect a Drupal site to the Acquia DAM service, which syncs media from the third party service to the site. The module doesn't sufficiently validate authorization to a list of DAM assets currently synced to the website creating an access bypass vulnerability. This...

7.5CVSS5.4AI score0.00307EPSS
SaveExploits0References4
Patchstack
Patchstack
•added 2025/09/03 12:00 a.m.•22 views

Drupal Acquia DAM module < 1.1.5 - Unauthenticated Multiple Vulnerabilities vulnerability

Unauthenticated Multiple Vulnerabilities vulnerability discovered by Brandon Goodwin bgoodie in WordPress Module Acquia DAM versions 1.1.5...

7.5CVSS7AI score0.00307EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/01/29 12:00 a.m.•17 views

Acquia DAM CMS CSRF

The vulnerability of Acquia DAM CMS system’s Drupal module is related to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack or cause service failures...

5.5CVSS5.2AI score0.0015EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2025/01/09 8:15 p.m.•34 views

CVE-2024-13261

Cross-Site Request Forgery CSRF vulnerability in Drupal Acquia DAM allows Cross Site Request Forgery.This issue affects Acquia DAM: from 0.0.0 before 1.0.13, from 1.1.0 before 1.1.0-beta3...

3.5CVSS0.0015EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/09 7:14 p.m.•36 views

CVE-2024-13261 Acquia DAM - Moderately critical - Cross Site Request Forgery, Denial of Service - SA-CONTRIB-2024-025

Cross-Site Request Forgery CSRF vulnerability in Drupal Acquia DAM allows Cross Site Request Forgery.This issue affects Acquia DAM: from 0.0.0 before 1.0.13, from 1.1.0 before 1.1.0-beta3...

0.0015EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/09 7:14 p.m.•70 views

CVE-2024-13261

The Drupal Acquia DAM CMS module is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability due to insufficient protection of the site disconnection functionality. A remote attacker can exploit this to perform a CSRF attack or cause a Denial of Service (DoS) , which may result in site edi...

3.5CVSS6.7AI score0.0015EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/01/09 7:14 p.m.•12 views

CVE-2024-13261 Acquia DAM - Moderately critical - Cross Site Request Forgery, Denial of Service - SA-CONTRIB-2024-025

Cross-Site Request Forgery CSRF vulnerability in Drupal Acquia DAM allows Cross Site Request Forgery.This issue affects Acquia DAM: from 0.0.0 before 1.0.13, from 1.1.0 before 1.1.0-beta3...

4.1AI score0.0015EPSS
SaveExploits0References1
Rows per page
Query Builder