CVE-2021-29451

    Dashboard / Vulnerabilities / CVE-2021-29451

    CVE-2021-29451

    Published: 16 Apr 2021Last Modified: 9 Jul 2026

    Summary:

    Details: Portofino is an open source web development framework. Portofino before version 5.2.1 did not properly verify the signature of JSON Web Tokens. This allows forging a valid JWT. The issue will be patched in the upcoming 5.2.1 release.

    References: https://github.com/ManyDesigns/Portofino/security/advisories/GHSA-6g3c-2mh5-7q6x, https://mvnrepository.com/artifact/com.manydesigns/portofino, https://github.com/ManyDesigns/Portofino/commit/8c754a0ad234555e813dcbf9e57d637f9f23d8fb

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 3becdfb103086ae47d5a5f3a25699eae86aff359
    Fixed -b8d6a89e94d56247186951a45581b40cac20c32a

    Affected versions

    5.2.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2021-29451 | CVE-DB