Lucene search

K
osvGoogleOSV:CVE-2022-26652
HistoryMar 10, 2022 - 5:47 p.m.

CVE-2022-26652

2022-03-1017:47:51
Google
osv.dev
4
nats
nats-server
directory traversal
zip archive
jetstream streams

EPSS

0.001

Percentile

34.3%

NATS nats-server before 2.7.4 allows Directory Traversal (with write access) via an element in a ZIP archive for JetStream streams. nats-streaming-server before 0.24.3 is also affected.

EPSS

0.001

Percentile

34.3%