| Package | Affected versions | Patched versions |
|---|---|---|
| jammer | ≤ 6.x-1.7 |
Multiple cross-site request forgery (CSRF) vulnerabilities in the Jammer module before 6.x-1.8 and 7.x-1.x before 7.x-1.4 for Drupal allow remote attackers to hijack the authentication of administrators for requests that delete a setting for (1) hidden form elements or (2) status messages via unspecified vectors, related to "report administration."
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free