CVE-2015-3352: Jammer Project Jammer

Medium severity, CVSS 6.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Multiple cross-site request forgery (CSRF) vulnerabilities in the Jammer module before 6.x-1.8 and 7.x-1.x before 7.x-1.4 for Drupal allow remote attackers to hijack the authentication of administrators for requests that delete a setting for (1) hidden form elements or (2) status messages via unspecified vectors, related to "report administration."

Affected products

• Jammer Project Jammer: up to and including 6.x-1.7

Published 2015-04-21. Last modified 2026-06-17.