alibaba__nacos_CVE-2021-44667_2-0-3

Nacos: Dynamic Na ming and Co nfiguration S ervice What does it do Nacos official site: nacos.io is an easy-to-use platform designed for dynamic service discovery and configuration and service management. It helps you to build cloud native applications and microservices platform easily. Service i...

CVE-2021-44667

A Cross Site Scripting XSS vulnerability exists in Nacos 2.0.3 in auth/users via the 1 pageSize and 2 pageNo parameters...

CVE-2021-44667

CVE-2021-44667 is a Cross Site Scripting (XSS) vulnerability in Nacos 2.0.3 affecting the auth/users endpoint via the pageSize and pageNo parameters. The issue arises from insufficient input validation/filtering of user-supplied data, enabling attacker-controlled scripts to be executed in the vic...