CVE-2021-29442
HIGH EXPLOITED NUCLEINacos < 1.4.1 - Unauthenticated Database Manipulation via Derby Endpoint
Title source: llmExploitation Summary
CVE-2021-29442 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 2 public exploits from researchers including VictorShem, nanaao. A Nuclei detection template is also available.
AI-analyzed exploit summary The repository claims to be a PoC for CVE-2021-29442 but contains a YAML file for CVE-2024-4577, indicating a mismatch or potential deception. The README lacks technical details and instead provides FOFA/ZoomEye search queries, which is typical of suspicious repos.
Description
Nacos is a platform designed for dynamic service discovery and configuration and service management. In Nacos before version 1.4.1, the ConfigOpsController lets the user perform management operations like querying the database or even wiping it out. While the /data/remove endpoint is properly protected with the @Secured annotation, the /derby endpoint is not protected and can be openly accessed by unauthenticated users. These endpoints are only valid when using embedded storage (derby DB) so this issue should not affect those installations using external storage (e.g. mysql)
Exploits (2)
The repository claims to be a PoC for CVE-2021-29442 but contains a YAML file for CVE-2024-4577, indicating a mismatch or potential deception. The README lacks technical details and instead provides FOFA/ZoomEye search queries, which is typical of suspicious repos.
This repository contains a functional exploit for CVE-2021-29442, targeting Nacos' Derby database interface to achieve remote command execution via SQL injection and malicious JAR deployment. The exploit automates payload generation, execution, and interactive command handling.
Nuclei Templates (1)
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N