Skip to content
OpenAdvisories

Vendor

fxbin

1 known vulnerabilities.

Products

bubble-fireworks 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2021-29500

    Missing validation of JWT signature

    bubble fireworks is an open source java package relating to Spring Framework. In bubble fireworks before version 2021.BUILD-SNAPSHOT there is a vulnerability in which the package did not properly verify the signature of JSON Web Tokens. This allows to forgery…

    fxbin bubble-fireworks