CVE-2024-13261

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Acquia DAM allows Cross Site Request Forgery.This issue affects Acquia DAM: from 0.0.0 before 1.0.13, from 1.1.0 before 1.1.0-beta3.
References
Link Resource
https://www.drupal.org/sa-contrib-2024-025 Third Party Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:acquia:dam:*:*:*:*:*:drupal:*:*
cpe:2.3:a:acquia:dam:1.1.0:-:*:*:*:drupal:*:*
cpe:2.3:a:acquia:dam:1.1.0:beta1:*:*:*:drupal:*:*
cpe:2.3:a:acquia:dam:1.1.0:beta2:*:*:*:drupal:*:*

History

27 Aug 2025, 20:31

Type Values Removed Values Added
References () https://www.drupal.org/sa-contrib-2024-025 - () https://www.drupal.org/sa-contrib-2024-025 - Third Party Advisory
CPE cpe:2.3:a:acquia:dam:*:*:*:*:*:drupal:*:*
cpe:2.3:a:acquia:dam:1.1.0:-:*:*:*:drupal:*:*
cpe:2.3:a:acquia:dam:1.1.0:beta2:*:*:*:drupal:*:*
cpe:2.3:a:acquia:dam:1.1.0:beta1:*:*:*:drupal:*:*
First Time Acquia
Acquia dam

10 Jan 2025, 22:15

Type Values Removed Values Added
Summary
  • (es) La vulnerabilidad de Cross-Site Request Forgery (CSRF) en Drupal Acquia DAM permite Cross-Site Request Forgery. Este problema afecta a Acquia DAM: desde la versión 0.0.0 hasta la 1.0.13, desde la versión 1.1.0 hasta la 1.1.0-beta3.
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 3.5

09 Jan 2025, 20:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-01-09 20:15

Updated : 2025-08-27 20:31


NVD link : CVE-2024-13261

Mitre link : CVE-2024-13261

CVE.ORG link : CVE-2024-13261


JSON object : View

Products Affected

acquia

  • dam
CWE
CWE-352

Cross-Site Request Forgery (CSRF)