CVE-2024-13261
Acquia DAM - Moderately critical - Cross Site Request Forgery, Denial of Service - SA-CONTRIB-2024-025
Summary
Acquia DAM - Moderately critical - Cross Site Request Forgery, Denial of Service - SA-CONTRIB-2024-025
Original description
The description as published by the source.
Cross-Site Request Forgery (CSRF) vulnerability in Drupal Acquia DAM allows Cross Site Request Forgery.This issue affects Acquia DAM: from 0.0.0 before 1.0.13, from 1.1.0 before 1.1.0-beta3.
Affected packages
Packagist:https://packages.drupal.org/8
drupal/acquia_dam
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.13"}],"database_specific":{"constraint":"<1.0.13"}},{"type":"ECOSYSTEM","events":[{"introduced":"1.1.0-beta1"},{"fixed":"1.1.0-beta3"}],"database_specific":{"constraint":">=1.1.0-beta1 <1.1.0-beta3"}}]
References
- advisory github.com
- advisory nvd.nist.gov
- web drupal.org
- web git.drupalcode.org
- web drupal.org