CVE-2016-10543CWE-20

CVE-2016-10543: vulnerability in HackerOne call node module

Published · Updated

Follow this CVE+ Monitor call node module+ Monitor call

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.2%
call is an HTTP router that is primarily used by the hapi framework. There exists a bug in call versions 2.0.1-3.0.1 that does not validate empty parameters, which could result in invalid input bypassing the route validation rules.
Affected products
HackerOne · call node module