PT-2018-4722

Name of the Vulnerable Software and Affected Versions call versions 2.0.1 through 3.0.1 Description The issue concerns a bug in the call HTTP router, primarily used by the hapi framework, where empty parameters are not validated. This could result in invalid input bypassing route validation rules...

CVE-2016-10543: Improper Input Validation

call is an HTTP router that is primarily used by the hapi framework. There exists a bug in call versions 2.0.1-3.0.1 that does not validate empty parameters, which could result in invalid input bypassing the route validation rules...

Route Validation Bypass

Overview Affected versions of call do not validate empty parameters, which may result in a bypass of route validation rules. Proof of Concept Routing Scheme: /api/param/param2/details Triggering Request Path: /api/// Recommendation Update to version 3.0.2 or later. References - Issue 3228 - GitHu...