Web

Nacos User-Agent Authentication Bypass (CVE-2021-29441)

Nacos 1.4.0 with authentication enabled, vulnerable to CVE-2021-29441: requests whose User-Agent is Nacos-Server skip the auth filter, so an unauthenticated user calls the user API and adds an account.

Pas commencéDockercommit 3736f9dx86_64 · aarch64Secret

Objectif

Exploit CVE-2021-29441 to bypass Nacos authentication and read the flag.

Le brief de ce lab se trouve dans son dépôt.