CVE-2014-4671
1 advisory.
npm/hapi CVE-2014-4671: medium
Rosetta-Flash JSONP Vulnerability in hapi
Action: Upgrade hapi to 6.1.0 or later.
npm i hapi@6.1.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.1.0 | - |
Fixed versions
| 6.1.0 |
Sources
- osv: GHSA-363h-vj6q-3cmj
- https://nvd.nist.gov/vuln/detail/CVE-2014-4671
- https://github.com/spumko/hapi/pull/1766
- https://github.com/hapijs/hapi/commit/d47f57abf23bdaa84f61aed2bac94ae5f358afb7
- https://github.com/patrickkettner
- https://github.com/spumko/hapi
- https://www.npmjs.com/advisories/12
- http://helpx.adobe.com/security/products/flash-player/apsb14-17.html
- http://miki.it/blog/2014/7/8/abusing-jsonp-with-rosetta-flash
- http://rhn.redhat.com/errata/RHSA-2014-0860.html
- http://secunia.com/advisories/59774
- http://secunia.com/advisories/59837
- http://security.gentoo.org/glsa/glsa-201407-02.xml
- http://www.securityfocus.com/bid/68457
- http://www.securitytracker.com/id/1030533
CVE-2014-4671 · published · modified · JSON