Back to the CVE list
CVE-2021-29441

Vulnerability in Alibaba Nacos

CVSS score

9.8

EPSS probability

%83.5

Risk score

8.2

Published

5 y ago

OverviewPublic Exploits (7)NewsroomVulnerability Timeline

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

N
projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-29441.yaml
Nuclei

Nuclei: Nacos <1.4.1 - Authentication Bypass

Exploit reference
G
advisories/GHSA-36hp-jr8h-556f
GitHub

https://github.com/advisories/GHSA-36hp-jr8h-556f

Exploit reference
G
alibaba/nacos/issues/4701
GitHub

https://github.com/alibaba/nacos/issues/4701

Exploit reference
G
azhao1981/CVE-2021-29441
GitHub

azhao1981/CVE-2021-29441

Public PoC
G
bysinks/CVE-2021-29441
GitHub

bysinks/CVE-2021-29441

Public PoC
G
CyberCTF/vulhub-nacos-cve-2021-29441
GitHub

Vulhub nacos/CVE-2021-29441: Nacos User-Agent Authentication Bypass (CVE-2021-29441), run with Isoloom

Public PoC
G
hh-hunter/nacos-cve-2021-29441
GitHub

hh-hunter/nacos-cve-2021-29441

Public PoC

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2021-29441"