Filtered by vendor Sideway
Subscriptions
Filtered by product Hapi Crumb
Subscriptions
Total
1 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2014-7193 | 1 Sideway | 1 Hapi Crumb | 2024-11-21 | N/A |
The Crumb plugin before 3.0.0 for Node.js does not properly restrict token access in situations where a hapi route handler has CORS enabled, which allows remote attackers to obtain sensitive information, and potentially obtain the ability to spoof requests to non-CORS routes, via a crafted web site that is visited by an application consumer. |
Page 1 of 1.