CVE-2021-29451
CRITICALCVSS 9.1/10EPSS 0.95%
Last modified
CVE-2021-29451 is a critical-severity vulnerability rated 9.1/10 on the CVSS scale. Portofino is an open source web development framework. Portofino before version 5.2.1 did not properly verify the signature of JSON Web Tokens. EPSS estimates a 0.95% chance of exploitation in the next 30 days.
Description
Portofino is an open source web development framework. Portofino before version 5.2.1 did not properly verify the signature of JSON Web Tokens. This allows forging a valid JWT. The issue will be patched in the upcoming 5.2.1 release.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Manydesigns | Portofino | >= 5.0.0, < 5.2.1 |
References
- https://github.com/ManyDesigns/Portofino/commit/8c754a0ad234555e813dcbf9e57d637f9f23d8fbPatch, Third Party Advisory
- https://github.com/ManyDesigns/Portofino/security/advisories/GHSA-6g3c-2mh5-7q6xThird Party Advisory
- https://mvnrepository.com/artifact/com.manydesigns/portofinoThird Party Advisory
- https://github.com/ManyDesigns/Portofino/commit/8c754a0ad234555e813dcbf9e57d637f9f23d8fbPatch, Third Party Advisory
- https://github.com/ManyDesigns/Portofino/security/advisories/GHSA-6g3c-2mh5-7q6xThird Party Advisory
- https://mvnrepository.com/artifact/com.manydesigns/portofinoThird Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-29451?
Portofino is an open source web development framework. Portofino before version 5.2.1 did not properly verify the signature of JSON Web Tokens. This allows forging a valid JWT. The issue will be patched in the upcoming 5.2.1 release.
How severe is CVE-2021-29451?
CVE-2021-29451 has a CVSS score of 9.1/10 (CRITICAL severity). The EPSS model estimates a 0.95% probability of exploitation in the next 30 days.
How do I fix CVE-2021-29451?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-29445jose-node-esm-runtime is an npm package which provides a num…5.9
- CVE-2021-29446jose-node-cjs-runtime is an npm package which provides a num…5.9
- CVE-2021-29447Wordpress is an open source CMS. A user with the ability to …6.5
- CVE-2021-29448Pi-hole is a Linux network-level advertisement and Internet …8.8
- CVE-2021-29449Pi-hole is a Linux network-level advertisement and Internet …7.8
- CVE-2021-29450Wordpress is an open source CMS. One of the blocks in the Wo…4.3
- CVE-2021-29452a12n-server is an npm package which aims to provide a simple…6.5
- CVE-2021-29453matrix-media-repo is an open-source multi-domain media repos…6.5
- CVE-2021-29454Smarty is a template engine for PHP, facilitating the separa…8.8
- CVE-2021-29455Grassroot Platform is an application to make it faster, chea…5.3
- CVE-2021-29456Authelia is an open-source authentication and authorization …5.4
- CVE-2021-29457Exiv2 is a command-line utility and C++ library for reading,…7.8
Are you affected by CVE-2021-29451?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST