TI-2015-02960 CVE-2015-3349 · GHSA-ph4g-hv4p-jj3jMultiple cross-site request forgery (CSRF) vulnerabilities in the Htaccess module before…Priority LOW 31Multiple cross-site request forgery (CSRF) vulnerabilities in the Htaccess module before 7.x-2.3 for Drupal allow remote attackers to hijack the authentication of administrators for requests that (1) deploy or (2) delete…CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.00643 · Published 2015-04-21 · No fix listed CWE-352