CVE-2024-13261

The Acquia DAM module for the Drupal CMS system is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability. This issue stems from the module's insufficient protection of the functionality that allows a site to be disconnected from the DAM instance. A remote attacker could exploit this to ...

CVE-2025-9954

Drupal Acquia DAM (versions 0.0.0 through 1.1.4) is vulnerable to an access bypass and information disclosure due to a missing authorization check. The module fails to sufficiently validate permissions for a list of DAM assets currently synced to the website, which allows for forceful browsing at...