← Back

Bubble Fireworks

bubble_fireworks

Vendor: Bubble Fireworks Project • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-29500
1Bubble Fireworks Project
1Bubble Fireworks
Nov 21, 2024
Jun 4, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
bubble fireworks is an open source java package relating to Spring Framework. In bubble fireworks before version 2021.BUILD-SNAPSHOT there is a vulnerability in which the package did not properly verify the signature of...Show more
bubble fireworks is an open source java package relating to Spring Framework. In bubble fireworks before version 2021.BUILD-SNAPSHOT there is a vulnerability in which the package did not properly verify the signature of JSON Web Tokens. This allows to forgery of valid JWTs.Show less