CVE-2015-9243: Medium severity hapi vulnerability
When server level, connection level or route level CORS configurations in hapi node module before 11.1.4 are combined and when a higher level config included security restrictions (like origin), a higher level config that included security restrictions (like origin) would have those restrictions overridden by less restrictive defaults (e.g. origin defaults to all origins ).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-9243?
CVE-2015-9243 has been classified as a moderate severity vulnerability.
How do I fix CVE-2015-9243?
To fix CVE-2015-9243, upgrade the hapi node module to version 11.1.4 or later.
What type of vulnerabilities does CVE-2015-9243 relate to?
CVE-2015-9243 relates to CORS configuration vulnerabilities in the hapi node module.
What versions of hapi are affected by CVE-2015-9243?
CVE-2015-9243 affects all versions of the hapi node module prior to 11.1.4.
What is CORS in relation to CVE-2015-9243?
CORS, or Cross-Origin Resource Sharing, is a security feature that allows or restricts resources on a web page from being requested from another domain.