This is a bugfix and security update for Acquia DAM. These fixes have been pushed to both the 1.0 and 1.1 beta releases
Addresses: SA-CONTRIB-2024-025
This fixes Migrate queue importer - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2024-024 and includes only phpcs fixes since 2.1.0.
Fixes Image Sizes - Moderately critical - Access bypass - SA-CONTRIB-2024-023
Make sure file access is given before rendering images.
Fixes Email Contact - Moderately critical - Access bypass - SA-CONTRIB-2024-020.
Changes since version 2.0.3:
Includes two new features:
Includes a security update, adding an additional entity access check on the receipt route. Commerce View Receipt - Moderately critical - Access bypass - SA-CONTRIB-2024-021
Fixes RESTful Web Services - Critical - Access bypass - SA-CONTRIB-2024-019