Still on Drupal 7? Security support for Drupal 7 ended on 5 January 2025. Please visit our Drupal 7 End of Life resources page to review all of your options.
This is bugfix and migration compatibility release for Acquia DAM
The most important fixes are followups from the 1.1 release and migration tool from Media: Acquia DAM. Users migrating from Media: Acquia DAM should be on this version (or newer) of Acquia Dam before migrating.
Sanitized and validated all file name and path inputs to prevent external manipulation that could lead to unauthorized file access or overwriting.
Untrusted Input in File Path Construction:
Hardened file handling logic to ensure untrusted user input cannot be used to construct file paths, mitigating the risk of directory traversal and unauthorized access.
Access Bypass via File Upload to Restricted Paths: