Description (CNA)
When attempting to allow authentication mode `try` in hapi, hapi-auth-jwt2 version 5.1.1 introduced an issue whereby people could bypass authentication.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| HackerOne / hapi-auth-jwt2 node module | affected 5.1.1 |
CWE
No CWE identifiers supplied.
References
- https://nodesecurity.io/advisories/81
- https://github.com/dwyl/hapi-auth-jwt2/pull/112
- https://github.com/dwyl/hapi-auth-jwt2/issues/111
ADP enrichment
No English description supplied.