Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An Access Control vulnerability exists in Nacos 2.0.3 in the access prompt page; enter username and password, click on login to capture packets and then change the returned package, which lets a malicious user login.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Alibaba nacos 授权问题漏洞
Vulnerability Description
Alibaba nacos是中国阿里巴巴（Alibaba）的一个动态服务发现、配置和服务管理平台。该软件支持基于 DNS 和基于 RPC 的服务发现，可提供提供实时健康检查，阻止服务向不健康的主机或服务实例发送请求等功能。 Alibaba nacos 2.0.3版本存在安全漏洞，该漏洞源于在访问提示页面中存在访问控制漏洞。
CVSS Information
N/A
Vulnerability Type
N/A