CVE-2022-26652
Published Mar 10, 2022NATS nats-server before 2.7.4 allows Directory Traversal (with write access) via an element in a ZIP archive for JetStream streams. nats-streaming-server before 0.24.3 is also aff…
Vendor/product archive
nats / nats_streaming_server CVEs
Beta · best-effort2 CVEs tagged to nats / nats_streaming_server — 0 Critical, 1 High, 1 Medium, 0 Low, 0 Unrated.
CVE-2022-24450
Published Feb 8, 2022NATS nats-server before 2.7.2 has Incorrect Access Control. Any authenticated user can obtain the privileges of the System account by misusing the "dynamically provisioned sandbox…
Showing 1-2 of 2 CVEsPage 1 of 1