Vulnerabilities > Alibaba > Nacos

DATE CVE VULNERABILITY TITLE RISK
2022-07-05 CVE-2021-43116 Improper Authentication vulnerability in Alibaba Nacos
An Access Control vulnerability exists in Nacos 2.0.3 in the access prompt page; enter username and password, click on login to capture packets and then change the returned package, which lets a malicious user login.
network
low complexity
alibaba CWE-287
8.8
2022-03-11 CVE-2021-44667 Cross-site Scripting vulnerability in Alibaba Nacos 2.0.3
A Cross Site Scripting (XSS) vulnerability exists in Nacos 2.0.3 in auth/users via the (1) pageSize and (2) pageNo parameters.
network
low complexity
alibaba CWE-79
6.1
2021-04-27 CVE-2021-29441 Authentication Bypass by Spoofing vulnerability in Alibaba Nacos
Nacos is a platform designed for dynamic service discovery and configuration and service management.
network
low complexity
alibaba CWE-290
critical
9.8
2021-04-27 CVE-2021-29442 Missing Authentication for Critical Function vulnerability in Alibaba Nacos
Nacos is a platform designed for dynamic service discovery and configuration and service management.
network
low complexity
alibaba CWE-306
7.5
2020-09-30 CVE-2020-19676 Unspecified vulnerability in Alibaba Nacos 1.1.4
Nacos 1.1.4 is affected by: Incorrect Access Control.
network
low complexity
alibaba
5.3