PT-2014-7828

Name of the Vulnerable Software and Affected Versions Crumb plugin versions prior to 3.0.0 Description The issue allows remote attackers to obtain sensitive information and potentially spoof requests to non-CORS routes by exploiting improper token access restriction in situations where a hapi rou...