Lucene search
PRIOn knowledge basePRION:CVE-2021-29500HistoryJun 04, 2021 - 8:15 p.m.
Design/Logic Flaw
2021-06-0420:15:00
PRIOn knowledge base
www.prio-n.com
2
0.001 Low
EPSS
Percentile
36.1%
bubble fireworks is an open source java package relating to Spring Framework. In bubble fireworks before version 2021.BUILD-SNAPSHOT there is a vulnerability in which the package did not properly verify the signature of JSON Web Tokens. This allows to forgery of valid JWTs.
| CPE | Name | Operator | Version |
|---|---|---|---|
| bubble_fireworks | eq | < 2021.build-snapshot |
Related
osv
osv
CVE-2021-29500
2021-06-04 20:15:07
cvelist
cvelist
CVE-2021-29500 Missing validation of JWT signature
2021-06-04 20:05:12
nvd
nvd
CVE-2021-29500
2021-06-04 20:15:07
gitlab
gitlab
Improper Verification of Cryptographic Signature
2021-06-04 00:00:00
cve
cve
CVE-2021-29500
2021-06-04 20:15:07