Lucene search
+L

12 matches found

OSV
OSV
added 2026/07/14 3:47 p.m.10 views

BIT-NATS-2026-58251 NATS Server: Queue Subscribe Authz Bypass

NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.0, 2.12.7, and 2.11.16, an authenticated user with subscription deny permissions could bypass a plain subject deny rule by using a queue subscription, because queue-specific deny...

6.5CVSS6.1AI score0.0034EPSS
SaveExploits0References8
Rows per page
Query Builder