Eval injection vulnerability in the internals.batch function in lib/batch.js in the bassmaster plugin before 1.5.2 for the hapi server framework for Node.js allows remote attackers to execute arbitrary Javascript code vi…
CVSS 2.0HIGH 10.0·Network·No auth·Interaction —·EPSS 0.78582·Published 2014-10-08·Fixed in 1.5.2CWE-94