Nats Streaming Server Security Vulnerabilities and Issues — Nats Streaming Server CVE List

Lucene search

NatsNats Streaming Server

2 matches found

CVE•added 2022/02/08 2:15 a.m.•160 views

CVE-2022-24450

NATS nats-server before 2.7.2 has Incorrect Access Control. Any authenticated user can obtain the privileges of the System account by misusing the "dynamically provisioned sandbox accounts" feature.

9CVSS8.5AI score0.00393EPSS

CVE•added 2022/03/10 5:47 p.m.•115 views

CVE-2022-26652

NATS nats-server before 2.7.4 allows Directory Traversal (with write access) via an element in a ZIP archive for JetStream streams. nats-streaming-server before 0.24.3 is also affected.

6.5CVSS6.3AI score0.00931EPSS