Vulnerabilities > Alibaba > Nacos
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-07-05 | CVE-2021-43116 | Improper Authentication vulnerability in Alibaba Nacos An Access Control vulnerability exists in Nacos 2.0.3 in the access prompt page; enter username and password, click on login to capture packets and then change the returned package, which lets a malicious user login. | 8.8 |
| 2022-03-11 | CVE-2021-44667 | Cross-site Scripting vulnerability in Alibaba Nacos 2.0.3 A Cross Site Scripting (XSS) vulnerability exists in Nacos 2.0.3 in auth/users via the (1) pageSize and (2) pageNo parameters. | 6.1 |
| 2021-04-27 | CVE-2021-29441 | Authentication Bypass by Spoofing vulnerability in Alibaba Nacos Nacos is a platform designed for dynamic service discovery and configuration and service management. | 9.8 |
| 2021-04-27 | CVE-2021-29442 | Unspecified vulnerability in Alibaba Nacos Nacos is a platform designed for dynamic service discovery and configuration and service management. | 7.5 |
| 2020-09-30 | CVE-2020-19676 | Unspecified vulnerability in Alibaba Nacos 1.1.4 Nacos 1.1.4 is affected by: Incorrect Access Control. | 5.3 |