Lucene search
GoogleOSV:CVE-2021-29451HistoryApr 16, 2021 - 10:15 p.m.
CVE-2021-29451
2021-04-1622:15:14
Google
osv.dev
4
portofino
web development
jwtforgery
Portofino is an open source web development framework. Portofino before version 5.2.1 did not properly verify the signature of JSON Web Tokens. This allows forging a valid JWT. The issue will be patched in the upcoming 5.2.1 release.
Related
cvelist
cvelist
nvd
nvd
CVE-2021-29451
2021-04-16 22:15:14
prion
prion
Code injection
2021-04-16 22:15:00
github
github
Missing validation of JWT signature in `ManyDesigns/Portofino`
2021-04-19 14:56:33
cve
cve
CVE-2021-29451
2021-04-16 22:15:14
osv
osv
Missing validation of JWT signature in `ManyDesigns/Portofino`
2021-04-19 14:56:33
veracode
veracode
Insecure JWT Verification
2021-04-19 05:25:29