Unauthorized access vulnerability exists in nacos (CNVD-2021-10382)

Nacos is the latest open source project from Alibaba. nacos has an unauthorized access vulnerability that can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in Nacos Backend

Nacos is the latest open source project from Alibaba. Nacos backend has a SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive database information...

Unauthorized Access Vulnerability in Nacos

Nacos is an Alibaba open source distributed configuration and registry center, Nacos by providing easy-to-use dynamic service discovery, service configuration, service sharing and management and other service infrastructure, to help users in the cloud native era, in the private cloud, hybrid clou...

Ali open source project nacos SQL injection vulnerability exists

Nacos is the latest open source project from Alibaba. The Ali open source project nacos suffers from a SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive database information...

Nacos Information Disclosure Vulnerability

nacos is a dynamic service discovery, configuration and service management platform for Alibaba in China. The software supports both DNS-based and RPC-based service discovery, and provides features such as providing real-time health checks and blocking services from sending requests to unhealthy...

CVE-2020-19676

Nacos 1.1.4 is affected by: Incorrect Access Control. An environment can be set up locally to get the service details interface. Then other Nacos service names can be accessed through the service list interface. Service details can then be accessed when not logged in...

CVE-2020-19676

Nacos 1.1.4 is affected by: Incorrect Access Control. An environment can be set up locally to get the service details interface. Then other Nacos service names can be accessed through the service list interface. Service details can then be accessed when not logged in...

Information disclosure

Nacos 1.1.4 is affected by: Incorrect Access Control. An environment can be set up locally to get the service details interface. Then other Nacos service names can be accessed through the service list interface. Service details can then be accessed when not logged in...

CVE-2020-19676

Nacos 1.1.4 is affected by: Incorrect Access Control. An environment can be set up locally to get the service details interface. Then other Nacos service names can be accessed through the service list interface. Service details can then be accessed when not logged in...

CVE-2020-19676

CVE-2020-19676 affects Nacos 1.1.4 with an Incorrect Access Control flaw: an attacker can locally set up an environment to access the service details interface and, from there, access other service names via the service list interface without logging in. The impact is the exposure of service deta...

Information Exposure

Nacos suffers from a flaw where users can access service details when unauthenticated. An environment can be set up locally to get the service details interface. Then other Nacos service names can be accessed through the service list interface. Service details can then be accessed when not logged...

Alibaba Nacos Has Arbitrary File Read Vulnerability

Nacos is Alibaba open source microservice registration and configuration distribution center . Alibaba Nacos has an arbitrary file read vulnerability that can be exploited by an attacker to obtain sensitive information on a website...