Bubble Fireworks Project: >> Bubble Fireworks >> 0.0.4 Security Vulnerabilities
bubble fireworks is an open source java package relating to Spring Framework. In bubble fireworks before version 2021.BUILD-SNAPSHOT there is a vulnerability in which the package did not properly verify the signature of JSON Web Tokens. This allows to forgery of valid JWTs.
CVSS Score
7.5
EPSS Score
0.001
Published
2021-06-04