CVE-2025-14472: CSRF in Drupal Acquia Content Hub

The CSRF vulnerability in Drupal Acquia Content Hub allows an attacker to trick a logged-in user into unknowingly executing malicious actions. For example, an attacker could craft a malicious link or embed it in an email, causing the user's browser to send a forged request to the server. This could result in unauthorized content creation, modification, or deletion, impacting the integrity of the content hub. The blast radius extends to any user with access to the Acquia Content Hub, as their actions could be hijacked. Successful exploitation could also lead to privilege escalation if the user has administrative rights.

1. Reserved2025-12-10
2. Published2026-01-28
3. Modified2026-02-06
4. EPSS updated2026-03-23

The primary mitigation for CVE-2025-14472 is to upgrade Acquia Content Hub to version 3.6.4 or later, which contains the fix. If immediate upgrading is not possible, implement strict input validation and output encoding to prevent the injection of malicious scripts. Consider using a Web Application Firewall (WAF) with CSRF protection rules to filter out suspicious requests. Review and strengthen user access controls to limit the potential impact of a successful attack. After upgrading, verify the fix by attempting to trigger a CSRF attack and confirming that it is blocked.