Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2021-29441 PoC — Authentication bypass

Source
https://github.com/bysinks/CVE-2021-29441
Associated Vulnerability
Title:Authentication bypass (CVE-2021-29441)
Description:Nacos is a platform designed for dynamic service discovery and configuration and service management. In Nacos before version 1.4.1, when configured to use authentication (-Dnacos.core.auth.enabled=true) Nacos uses the AuthFilter servlet filter to enforce authentication. This filter has a backdoor that enables Nacos servers to bypass this filter and therefore skip authentication checks. This mechanism relies on the user-agent HTTP header so it can be easily spoofed. This issue may allow any user to carry out any administrative tasks on the Nacos server.
Readme
# CVE-2021-29441
运行: CVE-2021-29441.exe ip
阿里nacos 越权添加账户
File Snapshot

 [4.0K]  /data/pocs/2bef1dc46843c7afede5414a6937ed1da2e1f57a
├── [1.7K]  CVE-2021-29441.go
└── [  78]  README.md

0 directories, 2 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →