PT-2024-10363 · Acquia · Acquia Dam

Balázs Ertl-Bakos + 3 · Published 2024-06-05 · Updated 2025-08-27 · CVE-2024-13261

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Acquia DAM versions 0.0.0 through 1.0.12 Acquia DAM versions 1.1.0 through 1.1.0-beta2

Description The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability in the Acquia DAM module of the Drupal CMS system. This vulnerability can be exploited by a remote attacker to perform a CSRF attack or cause a denial of service.

Recommendations For Acquia DAM versions 0.0.0 through 1.0.12, update to version 1.0.13 or later. For Acquia DAM versions 1.1.0 through 1.1.0-beta2, update to version 1.1.0-beta3 or later. As a temporary workaround, consider restricting access to the Acquia DAM module to minimize the risk of exploitation.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

BDU:2025-00867

CVE-2024-13261

DRUPAL-CONTRIB-2024-025

Affected Products

Acquia Dam

References · 7

• https://osv.dev/vulnerability/CVE-2024-13261 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-00867 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-13261 · Security Note
• https://twitter.com/CVEnew/status/1877620700791583155 · Twitter Post
• https://drupal.org/sa-contrib-2024-025 · Note
• https://t.me/cvenotify/107124 · Telegram Post
• https://t.me/cveNotify/133773 · Telegram Post