CVE-2021-29500 – bubble fireworks is an open source java package relating to Spring Framework. In bubble fi …

Vuln ID: CVE-2021-29500

Published:  2021-06-04  20:15:07Z

Description: bubble fireworks is an open source java package relating to Spring Framework. In bubble fireworks before version 2021.BUILD-SNAPSHOT there is a vulnerability in which the package did not properly verify the signature of JSON Web Tokens. This allows to forgery of valid JWTs.

Source: NVD.NIST.GOV

 


Date:

Categorie(s):

Tag(s):