Lucene search
PRIOn knowledge basePRION:CVE-2021-29451HistoryApr 16, 2021 - 10:15 p.m.
Code injection
2021-04-1622:15:00
PRIOn knowledge base
www.prio-n.com
4
Portofino is an open source web development framework. Portofino before version 5.2.1 did not properly verify the signature of JSON Web Tokens. This allows forging a valid JWT. The issue will be patched in the upcoming 5.2.1 release.
Related
cvelist
cvelist
nvd
nvd
CVE-2021-29451
2021-04-16 22:15:14
cve
cve
CVE-2021-29451
2021-04-16 22:15:14
github
github
Missing validation of JWT signature in `ManyDesigns/Portofino`
2021-04-19 14:56:33
osv
osv
CVE-2021-29451
2021-04-16 22:15:14
Missing validation of JWT signature in `ManyDesigns/Portofino`
2021-04-19 14:56:33
veracode
veracode
Insecure JWT Verification
2021-04-19 05:25:29