CVE-2024-13261
Acquia DAM provides a connection to a third-party asset management system, allowing for images to be managed, linked to, and viewed from Drupal. In or...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Acquia DAM provides a connection to a third-party asset management system, allowing for images to be managed, linked to, and viewed from Drupal. In order for assets to be managed in Drupal, a site administrator must first authenticate the site to their DAM instance.
The module doesn't sufficiently protect the ability to disconnect a site from DAM. While disconnected sites do not lose asset data in Drupal, it will prevent site editors from accessing the DAM until a site administrator re-authenticates the site. Some uncached media images may also fail to be fetched while disconnected.
影響パッケージ
Packagist:https://packages.drupal.org/8
drupal/acquia_dam
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.13"}],"database_specific":{"constraint":"<1.0.13"}},{"type":"ECOSYSTEM","events":[{"introduced":"1.1.0-beta1"},{"fixed":"1.1.0-beta3"}],"database_specific":{"constraint":">=1.1.0-beta1 <1.1.0-beta3"}}]
参照URL
- web drupal.org