CVE-2015-2951
JWT.php in F21 JWT before 2.0 allows remote attackers to bypass signature verification via...
JWT.php in F21 JWT before 2.0 allows remote attackers to bypass signature verification via crafted tokens.
Exploit likelihood
What each source reports
NVD Score used
JWT.php in F21 JWT before 2.0 allows remote attackers to bypass signature verification via crafted tokens.
- Record
CVE-2015-2951- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:N - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
JWT.php in F21 JWT before 2.0 allows remote attackers to bypass signature verification via crafted tokens.
- Record
CVE-2015-2951- Updated
- 2026-11-02
EUVDEUVD-2015-3035 No score
JWT.php in F21 JWT before 2.0 allows remote attackers to bypass signature verification via crafted tokens.
- Record
EUVD-2015-3035- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xx3c-6h6w-w5rg No score
JWT.php in F21 JWT before 2.0 allows remote attackers to bypass signature verification via...
JWT.php in F21 JWT before 2.0 allows remote attackers to bypass signature verification via crafted tokens.
- Record
GHSA-xx3c-6h6w-w5rg- Weakness
- CWE-20
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2015-2951 is a medium vulnerability (CVSS 5.0) in F21 Jwt, published June 5, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.75%, the 89th percentile. No source names a fixed version.