https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 17:44:12 +0000 https://cve.radiocsirt.org/vuln/drupal-contrib-2025-105 <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/acquia_dam</p> <p>This module enables you to connect a Drupal site to the Acquia DAM service, which syncs media from the third party service to the site.</p> <p>The module doesn&#39;t sufficiently validate authorization to a list of DAM assets currently synced to the website creating an access bypass vulnerability.</p> <p>This vulnerability is mitigated by the fact that it only impacts sites where users having the “view media” permission accessing any DAM asset is undesirable.</p> <p>**CVSS risk score ([experimental](https://www.drupal.org/project/securitydrupalorg/issues/3442181)) 6.9 / Medium**</p> <p>[CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N](https://www.first.org/cvss/calculator/4-0#CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N)</p> <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/acquia_dam</p> <p>This module enables you to connect a Drupal site to the Acquia DAM service, which syncs media from the third party service to the site.</p> <p>The module doesn&#39;t sufficiently validate authorization to a list of DAM assets currently synced to the website creating an access bypass vulnerability.</p> <p>This vulnerability is mitigated by the fact that it only impacts sites where users having the “view media” permission accessing any DAM asset is undesirable.</p> <p>**CVSS risk score ([experimental](https://www.drupal.org/project/securitydrupalorg/issues/3442181)) 6.9 / Medium**</p> <p>[CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N](https://www.first.org/cvss/calculator/4-0#CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N)</p> https://cve.radiocsirt.org/vuln/drupal-contrib-2025-105 https://cve.radiocsirt.org/vuln/euvd-2026-257205 EUVD-2026-257205 https://cve.radiocsirt.org/vuln/euvd-2026-257205 https://cve.radiocsirt.org/vuln/fkie_cve-2025-9954 <p>Missing Authorization vulnerability in Drupal Acquia DAM allows Forceful Browsing.This issue affects Acquia DAM: from 0.0.0 before 1.1.5.</p> <p>Missing Authorization vulnerability in Drupal Acquia DAM allows Forceful Browsing.This issue affects Acquia DAM: from 0.0.0 before 1.1.5.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-9954 https://cve.radiocsirt.org/vuln/ghsa-x957-32v9-m7vg <p><strong>Affected:</strong> Packagist: drupal/acquia_dam</p> <p>Missing Authorization vulnerability in Drupal Acquia DAM allows Forceful Browsing. This issue affects Acquia DAM: from 0.0.0 before 1.1.5.</p> <p><strong>Affected:</strong> Packagist: drupal/acquia_dam</p> <p>Missing Authorization vulnerability in Drupal Acquia DAM allows Forceful Browsing. This issue affects Acquia DAM: from 0.0.0 before 1.1.5.</p> https://cve.radiocsirt.org/vuln/ghsa-x957-32v9-m7vg https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1954 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Drupal ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Drupal ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1954