CVE-2015-9236: Improper Access Control

Hapi versions less than 11.0.0 implement CORS incorrectly and allowed for configurations that at best returned inconsistent headers and at worst allowed cross-origin activities that were expected to be forbidden. If the connection has CORS enabled but one route has it off, and the route is not GE...

PT-2018-4550

Name of the Vulnerable Software and Affected Versions Hapi versions prior to 11.0.0 Description The issue arises from incorrect CORS implementation in affected versions, leading to inconsistent headers and potentially allowing cross-origin activities that should be forbidden. Specifically, when...