Skip to content
OpenAdvisories
High · 7.5 CVE-2025-9954 DRUPAL-CONTRIB-2025-105EUVD-2025-36881GHSA-x957-32v9-m7vg

Acquia DAM - Moderately critical - Access bypass, Information Disclosure - SA-CONTRIB-2025-105

Published Oct 29, 2025 · Updated Oct 30, 2025 · Assigned by drupal

Vendor: Drupal Product: Acquia DAM Package: drupal/acquia_dam Ecosystem: Packagist

Description

Missing Authorization vulnerability in Drupal Acquia DAM allows Forceful Browsing.This issue affects Acquia DAM: from 0.0.0 before 1.1.5.

Affected products

VendorProductAffectedFixed
Drupal Acquia DAM 0.0.0 – < 1.1.5 1.1.5

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/acquia_dam < 1.1.5 1.1.5 DRUPAL-CONTRIB-2025-105

Advisories 1

References