CVE-2021-32631

CVE-2021-32631 affects the NIMBLE Common package. Before commit 3b96cb0293d3443b870351945f41d7d55cb34b53, it did not properly verify JWT signatures, enabling forging of valid JWTs and potential authentication bypasses. A patch was introduced in that commit; as a workaround, the parseClaimsJws met...

CVE-2021-32631: Authentication Bypass by Spoofing

Common is a package of common modules that can be accessed by NIMBLE services. Common before commit number 3b96cb0293d3443b870351945f41d7d55cb34b53 did not properly verify the signature of JSON Web Tokens. This allows someone to forge a valid JWT. Being able to forge JWTs may lead to authenticati...

CVE-2021-29500: Improper Verification of Cryptographic Signature

bubble fireworks is an open source java package relating to Spring Framework. In bubble fireworks before version 2021.BUILD-SNAPSHOT there is a vulnerability in which the package did not properly verify the signature of JSON Web Tokens. This allows to forgery of valid JWTs...

PT-2021-18255

Name of the Vulnerable Software and Affected Versions: bubble fireworks versions prior to 2021.BUILD-SNAPSHOT Description: The issue concerns a vulnerability in the package where it did not properly verify the signature of JSON Web Tokens, allowing for the forgery of valid JWTs. This affects the...

PT-2021-18227

Name of the Vulnerable Software and Affected Versions: Grassroot Platform versions prior to 1.3.1 Description: The issue concerns the improper verification of the signature of JSON Web Tokens JWT when refreshing an existing JWT, allowing for the forgery of a valid JWT. This problem has been...

PT-2018-9428

Name of the Vulnerable Software and Affected Versions inversoft prime-jwt versions prior to commit abb0d479389a2509f939452a6767dc424bb5e6ba Description The issue concerns an incorrect signature validation of a JWT token. An attacker can exploit this by crafting a JWT token with a valid header usi...

Jerome Gamez Firebase Admin SDK for PHP Access Control Error Vulnerability

Jerome Gamez Firebase Admin SDK for PHP is a PHP-based software development kit. An access control error vulnerability exists in the src/Firebase/Auth/IdTokenVerifier.php file in the Jerome Gamez Firebase Admin SDK for PHP versions 3.2.0 through 3.8.0, which stems from the program's failure to...

CVE-2018-1000025: Incorrect Permission Assignment for Critical Resource

Jerome Gamez Firebase Admin SDK for PHP version from 3.2.0 to 3.8.0 contains a Incorrect Access Control vulnerability in src/Firebase/Auth/IdTokenVerifier.php does not verify for token signature that can result in JWT with any email address and user ID could be forged from an actual token, or fro...