漏洞描述
Eval injection vulnerability in the internals.batch function in lib/batch.js in the bassmaster plugin before 1.5.2 for the hapi server framework for Node.js allows remote attackers to execute arbitrary Javascript code via unspecified vectors.
影响产品
暂无结构化产品信息。
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
www.securityfocus.comhttp://www.securityfocus.com/bid/70180↗exchange.xforce.ibmcloud.comhttps://exchange.xforce.ibmcloud.com/vulnerabilities/96730↗www.openwall.comhttp://www.openwall.com/lists/oss-security/2014/09/30/10↗github.comhttps://github.com/hapijs/bassmaster/commit/b751602d8cb7194ee62a61e085069679525138c4↗nodesecurity.iohttps://nodesecurity.io/advisories/bassmaster_js_injection↗