CVE-2021-29500

2021-06-0420:15:07

Google

osv.dev

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.1%

JSON

bubble fireworks is an open source java package relating to Spring Framework. In bubble fireworks before version 2021.BUILD-SNAPSHOT there is a vulnerability in which the package did not properly verify the signature of JSON Web Tokens. This allows to forgery of valid JWTs.

CPENameOperatorVersion
bubble-fireworkseq0.0.5-release
bubble-fireworkseq0.0.9-release
bubble-fireworkseq0.0.6-release
bubble-fireworkseq0.0.3-release
bubble-fireworkseq1.0.0-release
bubble-fireworkseq1.0.1-release
bubble-fireworkseq0.0.7-release
bubble-fireworkseq0.0.8-release
bubble-fireworkseq0.0.4-release

Name	Operator	Version
bubble-fireworks	eq	0.0.5-release
bubble-fireworks	eq	0.0.9-release
bubble-fireworks	eq	0.0.6-release
bubble-fireworks	eq	0.0.3-release
bubble-fireworks	eq	1.0.0-release
bubble-fireworks	eq	1.0.1-release
bubble-fireworks	eq	0.0.7-release
bubble-fireworks	eq	0.0.8-release
bubble-fireworks	eq	0.0.4-release