PT-2025-44365

CVE-2025-9954

·

Published

2025-09-03

·

Updated

2026-10-08

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Acquia DAM versions 0.0.0 through 1.1.4
Description A missing authorization issue exists in Drupal Acquia DAM, allowing for forceful browsing. This allows unauthorized access to resources.
Recommendations Update Acquia DAM to version 1.1.5 or later.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-862: Missing Authorization
Related identifiers
CVE-2025-9954
GHSA-X957-32V9-M7VG
DRUPAL-CONTRIB-2025-105
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com