CVE-2015-9243

CVE-2015-9243 describes a vulnerability in the hapi Node.js module (versions prior to 11.1.4) where Cross-Origin Resource Sharing (CORS) configurations could be improperly overridden. Specifically, more restrictive server, connection, or route-level CORS settings, such as those defining specific origins, could be superseded by less restrictive defaults (e.g., allowing all origins '*'). This medium-severity vulnerability (CVSS 5.9) has a network attack vector and high impact on integrity, as it could lead to unauthorized cross-origin requests. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.