Количество 2
Количество 2
CVE-2021-29451
почти 5 лет назад
Portofino is an open source web development framework. Portofino before version 5.2.1 did not properly verify the signature of JSON Web Tokens. This allows forging a valid JWT. The issue will be patched in the upcoming 5.2.1 release.
CVSS3: 9.1
EPSS: Низкий
GHSA-6g3c-2mh5-7q6x
почти 5 лет назад
Missing validation of JWT signature in `ManyDesigns/Portofino`
CVSS3: 9.1
EPSS: Низкий
Уязвимостей на страницу
20
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2021-29451 Portofino is an open source web development framework. Portofino before version 5.2.1 did not properly verify the signature of JSON Web Tokens. This allows forging a valid JWT. The issue will be patched in the upcoming 5.2.1 release. | CVSS3: 9.1 | 0% Низкий | почти 5 лет назад |
| GHSA-6g3c-2mh5-7q6x Missing validation of JWT signature in `ManyDesigns/Portofino` | CVSS3: 9.1 | 0% Низкий | почти 5 лет назад |
Уязвимостей на страницу
20