152 matches found
Improper Authentication
An Access Control vulnerability exists in Nacos 2.0.3 in the access prompt page; enter username and password, click on login to capture packets and then change the returned package, which lets a malicious user login...
CVE-2021-43116
An Access Control vulnerability exists in Nacos 2.0.3 in the access prompt page; enter username and password, click on login to capture packets and then change the returned package, which lets a malicious user login...
CVE-2021-43116
An Access Control vulnerability exists in Nacos 2.0.3 in the access prompt page; enter username and password, click on login to capture packets and then change the returned package, which lets a malicious user login...
CVE-2021-43116
An Access Control vulnerability exists in Nacos 2.0.3 in the access prompt page; enter username and password, click on login to capture packets and then change the returned package, which lets a malicious user login...
Improper access control
An Access Control vulnerability exists in Nacos 2.0.3 in the access prompt page; enter username and password, click on login to capture packets and then change the returned package, which lets a malicious user login...
Improper Authentication
An Access Control vulnerability exists in Nacos 2.0.3 in the access prompt page; enter username and password, click on login to capture packets and then change the returned package, which lets a malicious user login...
Alibaba nacos 授权问题漏洞
Alibaba nacos is a dynamic service discovery, configuration and service management platform for Alibaba in China. The software supports both DNS-based and RPC-based service discovery, and provides features such as providing real-time health checks to prevent services from sending requests to...
PT-2022-11790 · Nacos · Nacos
Name of the Vulnerable Software and Affected Versions: Nacos version 2.0.3 Description: An Access Control issue exists in the access prompt page. A malicious user can login by capturing packets, entering username and password, clicking on login, and then changing the returned package...
CVE-2021-43116
CVE-2021-43116 affects Nacos 2.0.3 via an Access Control vulnerability in the login flow. According to the connected exploit material, an attacker can login by capturing authentication traffic and modifying the returned package after submitting credentials on the access prompt page, effectively b...
CVE-2021-43116
An Access Control vulnerability exists in Nacos 2.0.3 in the access prompt page; enter username and password, click on login to capture packets and then change the returned package, which lets a malicious user login...
Nacos Cross-Site Scripting Vulnerability
Nacos is a dynamic service discovery, configuration and service management platform for Alibaba China. It supports DNS-based and RPC-based service discovery, and can provide features such as providing real-time health checks and blocking services from sending requests to unhealthy hosts or servic...
Cross-site Scripting (XSS)
nacos-console is vulnerable to cross-site scripting. The vulnerability exists because the library does not set the xssFilter option in the ConsoleConfig.java, allowing an attacker to inject and execute malicious javascript through the pageSize and pageNo parameters...
cc.uncarbon.framework:helio-starter-cloud (>=1.2.1 <=1.3.0), com.alibaba.nacos:nacos-client (>=2.0.0-ALPHA.1 <=2.0.0-BETA) potentially affected by CVE-2021-44667 via com.alibaba.nacos:nacos-common (>=2.0.0-ALPHA.1 <=2.0.0-BETA)
com.alibaba.nacos:nacos-common MAVEN version =2.0.0-ALPHA.1, =1.2.1, =2.0.0-ALPHA.1, =2.0.0-BETA Source cves: CVE-2021-44667 Source advisory: OSV:GHSA-4GR7-QW2Q-JXH6...
cc.cc4414:cc-spring-cloud-starter (>=0.3.0 <=0.8.0), cc.cc4414:cc-spring-cloud-starter-gateway (>=0.5.0 <=0.8.0) +903 more potentially affected by CVE-2021-44667 via com.alibaba.nacos:nacos-common (>=0.1.0 <=1.4.4)
com.alibaba.nacos:nacos-common MAVEN version =0.1.0, =0.3.0, =0.5.0, =1.0.2, =1.0.0, =1.0.4.R, =1.1, =1.1, =1.0.0.RELEASE, =0.0.2, =0.0.2, =0.0.4.BETA, =1.0.0, =1.0.0, =2.1.0 and more Source cves: CVE-2021-44667 Source advisory: OSV:GHSA-4GR7-QW2Q-JXH6...
GHSA-4GR7-QW2Q-JXH6 Cross-site Scripting in Nacos
A Cross Site Scripting XSS vulnerability exists in Nacos prior to 1.4.5 and 2.1.0-BETA in auth/users via the 1 pageSize and 2 pageNo parameters...
Cross-site Scripting in Nacos
A Cross Site Scripting XSS vulnerability exists in Nacos prior to 1.4.5 and 2.1.0-BETA in auth/users via the 1 pageSize and 2 pageNo parameters...
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
A Cross Site Scripting XSS vulnerability exists in Nacos 2.0.3 in auth/users via the 1 pageSize and 2 pageNo parameters...
CVE-2021-44667
A Cross Site Scripting XSS vulnerability exists in Nacos 2.0.3 in auth/users via the 1 pageSize and 2 pageNo parameters...