CVE-2020-19676

5.3 mediumEPSS 1.4%

Medium (5.3) in alibaba nacos. EPSS 1.4% chance of exploitation in the next 30 days. Fixed in com.alibaba.nacos:nacos-common 1.2.0.

Nacos 1.1.4 is affected by: Incorrect Access Control. An environment can be set up locally to get the service details interface. Then other Nacos service names can be accessed through the service list interface. Service details can then be accessed when not logged in. (detail:https://github.com/alibaba/nacos/issues/2284)

Severity

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 72% of CVEs (scores of 2026-10-31)
Published: 2020-09-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

alibaba:nacos

Packages (OSV)

Advisory	Ecosystem	Package	Affected	Fixed in
GHSA-qf76-pr7x-h7r4	Maven	com.alibaba.nacos:nacos-common	<1.2.0	1.2.0

References

https://github.com/alibaba/nacos/issues/2284
https://github.com/alibaba/nacos/issues/2284

Check your stack JSON