CVE-2021-29441

Nacos is a platform designed for dynamic service discovery and configuration and service management. In Nacos before version 1.4.1, when configured to use authentication -Dnacos.core.auth.enabled=true Nacos uses the AuthFilter servlet filter to enforce authentication. This filter has a backdoor...

The vulnerability of the AuthFilter component in the Nacos software platform allows attackers to increase their privileges.

The vulnerability of the AuthFilter component in the Nacos software platform involves bypassing authentication through spoofing. Exploiting this vulnerability allows a malicious actor to enhance their privileges remotely...