Lucene search
GoogleOSV:GHSA-6G3C-2MH5-7Q6XHistoryApr 19, 2021 - 2:56 p.m.
Missing validation of JWT signature in `ManyDesigns/Portofino`
2021-04-1914:56:33
Google
osv.dev
18
security advisory
jwt signature
manydesigns/portofino
json web tokens
forging valid jwt
patch release
Impact
Portofino is an open source web development framework. Portofino before version 5.2.1 did not properly verify the signature of JSON Web Tokens.
This allows forging a valid JWT.
Patches
The issue will be patched in the upcoming 5.2.1 release.
For more information
If you have any questions or comments about this advisory:
- Open an issue in https://github.com/ManyDesigns/Portofino
Related
cvelist
cvelist
nvd
nvd
CVE-2021-29451
2021-04-16 22:15:14
prion
prion
Code injection
2021-04-16 22:15:00
github
github
Missing validation of JWT signature in `ManyDesigns/Portofino`
2021-04-19 14:56:33
cve
cve
CVE-2021-29451
2021-04-16 22:15:14
osv
osv
CVE-2021-29451
2021-04-16 22:15:14
veracode
veracode
Insecure JWT Verification
2021-04-19 05:25:29