CVE-2025-9954
CVE-2025-9954 · Acquia DAM - Moderately critical - Access bypass, Information Disclosure - SA-CONTRIB-2025-105
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Missing Authorization vulnerability in Drupal Acquia DAM allows Forceful Browsing.This issue affects Acquia DAM: from 0.0.0 before 1.1.5.
CVSS 7.5 · High · EPSS 0.3% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
acquia dam
- Versions
- ≥ 0.0.0, < 1.1.5: Affected (semver)
Update to 1.1.5
drupal/acquia_dam Packagist:https://packages.drupal.org/8
- Affected ranges
- ECOSYSTEM: < 1.1.5
Update to 1.1.5
drupal/acquia_dam Packagist
- Affected ranges
- ECOSYSTEM: < 1.1.5
Update to 1.1.5