← CVE Intelligence

CVE-2021-29500

Missing validation of JWT signature PUBLISHED

Description (CNA)

bubble fireworks is an open source java package relating to Spring Framework. In bubble fireworks before version 2021.BUILD-SNAPSHOT there is a vulnerability in which the package did not properly verify the signature of JSON Web Tokens. This allows to forgery of valid JWTs.

Affected (CNA)

Vendor / productVersions
fxbin / bubble-fireworksaffected < 2021.BUILD-SNAPSHOT

CWE

CWE-347

References

ADP enrichment

CVE

No English description supplied.