CVE-2021-44667: Alibaba Nacos

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

A Cross Site Scripting (XSS) vulnerability exists in Nacos 2.0.3 in auth/users via the (1) pageSize and (2) pageNo parameters.

Affected products

• Alibaba Nacos: version 2.0.3 only

Published 2022-03-11. Last modified 2026-06-17.