Lucene search
+L
Nimble-projectCommon

1 matches found

CVE
CVE
added 2021/07/26 3:20 p.m.54 views

CVE-2021-32631

CVE-2021-32631 affects the NIMBLE Common package. Before commit 3b96cb0293d3443b870351945f41d7d55cb34b53, it did not properly verify JWT signatures, enabling forging of valid JWTs and potential authentication bypasses. A patch was introduced in that commit; as a workaround, the parseClaimsJws met...

6.5CVSS6.6AI score0.0109EPSS
Save