CVE-2016-10525

2018-04-2600:00:00

hackerone

www.cve.org

AI Score

9.7

Confidence

High

EPSS

0.003

Percentile

70.4%

JSON

When attempting to allow authentication mode try in hapi, hapi-auth-jwt2 version 5.1.1 introduced an issue whereby people could bypass authentication.

CNA Affected

[
  {
    "product": "hapi-auth-jwt2 node module",
    "vendor": "HackerOne",
    "versions": [
      {
        "status": "affected",
        "version": "5.1.1"
      }
    ]
  }
]