CVE-2021-29441

This Go script exploits CVE-2021-29441, an authentication bypass vulnerability in Alibaba Nacos, allowing unauthorized user creation. It checks for vulnerability presence and optionally creates a new user with specified credentials.

The repository contains Docker Compose configurations for setting up Nacos with MySQL in both vulnerable and patched states but lacks actual exploit code or technical details about CVE-2021-29441.

This Go-based exploit demonstrates CVE-2021-29441, an authentication bypass vulnerability in Alibaba Nacos that allows unauthorized user creation. The PoC sends crafted HTTP requests to add a new user without authentication.

This Go-based exploit demonstrates CVE-2021-29441, an authentication bypass vulnerability in Alibaba Nacos. It creates a new user account without proper authorization by sending crafted HTTP requests to the '/nacos/v1/auth/users' endpoint.