Alibaba Nacos
5 CVEs affecting Alibaba Nacos. Latest disclosed: 2022-07-05. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-43116 | High | 8.8 | 2022-07-05 | An Access Control vulnerability exists in Nacos 2.0.3 in the access prompt page; enter username and password, click on login to capture packets and then change… |
CVE-2021-29442 | High | 8.6 | 2021-04-27 | Nacos is a platform designed for dynamic service discovery and configuration and service management. In Nacos before version 1.4.1, the ConfigOpsController let… |
CVE-2021-29441 | High | 8.6 | 2021-04-27 | Nacos is a platform designed for dynamic service discovery and configuration and service management. In Nacos before version 1.4.1, when configured to use auth… |
CVE-2021-44667 | Medium | 6.1 | 2022-03-11 | A Cross Site Scripting (XSS) vulnerability exists in Nacos 2.0.3 in auth/users via the (1) pageSize and (2) pageNo parameters. |
CVE-2020-19676 | Medium | 5.3 | 2020-09-30 | Nacos 1.1.4 is affected by: Incorrect Access Control. An environment can be set up locally to get the service details interface. Then other Nacos service names… |