CVE-2024-13261

CVE-2024-13261 is a CSRF vulnerability in the Drupal Acquia DAM module. Affected releases are Acquia DAM for Drupal: 0.0.0 up to (but not including) 1.0.13, and 1.1.0 up to (but not including) 1.1.0-beta3. The issue stems from inadequate protection to disconnect a site from DAM (as described in S...

CVE-2025-9954

CVE-2025-9954 affects Drupal Acquia DAM (versions 0.0.0 up to 1.1.4). Root cause: missing authorization enabling forceful browsing of DAM assets. Impact is information disclosure and unauthorized resource access. Mitigation: update to Acquia DAM 1.1.5 or later. Multiple sources corroborate the vu...