漏洞描述
Alibaba Sentinel是面向分布式服务架构的流量控制组件，主要以流量为切入点，从流量控制、熔断降级、系统自适应保护等多个维度来帮助您保障微服务的稳定性。Sentinel控制台未经身份验证的用户可以公开访问。导致泄露节点端信息
Alibaba Sentinel 控制台未授权访问
PoC代码
暂无相关漏洞推荐
-
CVE-2021-44139: Alibaba Sentinel - Server-side request forgery (SSRF) POC
2025-09-01 | Alibaba SentinelThere is a Pre-Auth SSRF vulnerability in Alibaba Sentinel version 1.8.2, which allows remote unauth... -
alibaba-sentinel-default-user: Alibaba Sentinel 默认用户 POC
2025-09-01 | Alibaba SentinelFofa: app="Sentinel-Dashboard" -
CVE-2021-44139: Alibaba Sentinel - Server-side request forgery (SSRF) POC
2025-08-01 | Alibaba SentinelThere is a Pre-Auth SSRF vulnerability in Alibaba Sentinel version 1.8.2, which allows remote unauth... -
SourceCodester Pet Grooming Management Software SQL注入漏洞 无POC
2025-09-22 00:22:31 | SourceCodester Pet Grooming Management SoftwareSourceCodester Pet Grooming Management Software是SourceCodester开源的一个宠物美容管理系统。 SourceCodester Pet Groo... -
D-Link DIR-645 命令注入漏洞 无POC
2025-09-22 00:22:31 | D-Link DIR-645D-Link DIR-645是中国友讯（D-Link）公司的一款无线路由器。 D-Link DIR-645 105B01版本存在命令注入漏洞，该漏洞源于对文件/soap.cgi中参数service的错...