CVE-2014-7205

Eval injection vulnerability in the internals.batch function in lib/batch.js in the bassmaster plugin before 1.5.2 for the hapi server framework for Node.js allows remote attackers to execute arbitrary Javascript code via unspecified vectors.

Date published : 2014-10-08

http://www.securityfocus.com/bid/70180

https://github.com/hapijs/bassmaster/commit/b751602d8cb7194ee62a61e085069679525138c4