CVE-2016-10543

MEDIUM

call 2.0.1-3.0.1 - Improper Input Validation via Empty Parameter Bypass

Title source: llm

Description

call is an HTTP router that is primarily used by the hapi framework. There exists a bug in call versions 2.0.1-3.0.1 that does not validate empty parameters, which could result in invalid input bypassing the route validation rules.

References (2)

Core 2

Core References

Third Party Advisory x_refsource_misc

https://github.com/hapijs/hapi/issues/3228

Exploit, Third Party Advisory x_refsource_misc

https://nodesecurity.io/advisories/121

Scores

CVSS v3 5.3

EPSS 0.0123

EPSS Percentile 65.4%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Details

CWE

CWE-20

Status published

Products (2)

call_project/call 2.0.1 - 3.0.1

npm/call 2.0.1 - 3.0.2npm

Published May 31, 2018

Tracked Since Feb 18, 2026