CVE-2021-43116
HighPublished
An Access Control vulnerability exists in Nacos 2.0.3 in the access prompt page; enter username and password, click on login to capture packets and then...
- Published
- Jul 5, 2022
- Updated
- Aug 4, 2024
- Assigning CNA
- mitre
- Evidence observed
- Apr 3, 2023
Primary CVSS
8.8/ 10High
nvd · CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H7.5%
Low · next 30 days
- Percentile
- 94.4%
- Model date
- Oct 17, 2026
EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.
Summary
An Access Control vulnerability exists in Nacos 2.0.3 in the access prompt page; enter username and password, click on login to capture packets and then change the returned package, which lets a malicious user login.
Sources
Jenson Zhao · java · Apr 3, 2023
Responsible use
Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.