| Package | Affected versions | Patched versions |
|---|---|---|
| com.alibaba.nacos:nacos-common | ≥ 2.0.0-ALPHA.1, < 2.1.0-BETA< 1.4.5 | 2.1.0-BETA1.4.5 |
| nacos | = 2.0.3 |
A Cross Site Scripting (XSS) vulnerability exists in Nacos prior to 1.4.5 and 2.1.0-BETA in auth/users via the (1) pageSize and (2) pageNo parameters.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free