Dwyl

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Dwyl records in CISA KEV

No Dwyl vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Hapi-auth-jwt2 1 record MEDIUM

Records

1 record in Hapi-auth-jwt2 · all components

TI-2016-08567 CVE-2016-10525 · GHSA-mg8r-9g6j-hwv9

Improper authentication in HackerOne hapi-auth-jwt2 node module

MEDIUM 47

When attempting to allow authentication mode `try` in hapi, hapi-auth-jwt2 version 5.1.1 introduced an issue whereby people could bypass authentication.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02439 Published 2018-05-29 Fixed in 5.1.2 CWE-287

Open these records in search →

Critical	1
High	0
Medium	0
Low	0
No CVSS	0