CVE-2021-29451 — Missing validation of JWT signature in `ManyDesigns/Portofino`
Portofino is an open source web development framework. Portofino before version 5.2.1 did not properly verify the signature of JSON Web Tokens. This allows forging a valid JWT. …
Published: 2021-04-16 · CVSS: 9.1 · CVSS 3.1
Portofino is an open source web development framework. Portofino before version 5.2.1 did not properly verify the signature of JSON Web Tokens. This allows forging a valid JWT. The issue will be patched in the upcoming 5.2.1 release.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7