Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2021-29441 PoC — Nacos 安全漏洞

Source
https://github.com/hh-hunter/nacos-cve-2021-29441
Associated Vulnerability
Title:Nacos 安全漏洞 (CVE-2021-29441)
Description:nacos是中国阿里巴巴（Alibaba）的一个动态服务发现、配置和服务管理平台。该软件支持基于 DNS 和基于 RPC 的服务发现，可提供提供实时健康检查，阻止服务向不健康的主机或服务实例发送请求等功能。 Nacos 存在安全漏洞，该漏洞源于允许Nacos服务器绕过过滤器，从而跳过身份验证检查。这种机制依赖于用户代理HTTP头，因此很容易被欺骗。
File Snapshot

 [4.0K]  /data/pocs/a7c76cfeca81973db404477862d22d659dc6a578
├── [4.0K]  env
│   ├── [ 114]  mysql.env
│   └── [ 353]  nacos-standlone-mysql.env
├── [4.0K]  init.d
│   ├── [ 770]  no-vulnerabilities.properties
│   └── [ 722]  vulnerabilities.properties
├── [ 612]  no-vulnerabilities.yaml
└── [ 608]  vulnerabilities.yaml

2 directories, 6 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.