Lucene search
Veracode Vulnerability DatabaseVERACODE:34676HistoryMar 14, 2022 - 11:30 a.m.
Directory Traversal
2022-03-1411:30:41
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
14
0.001 Low
EPSS
Percentile
34.5%
github.com/nats-io/nats-streaming is vulnerable to directory traversal. The vulnerability exists due to ZIP archive elements in the EnableJetStream function of the jetstream.go file which allows a malicious user to traverse the file system.
References
www.openwall.com/lists/oss-security/2022/03/10/1
advisories.nats.io/CVE/CVE-2022-26652.txt
github.com/nats-io/nats-server/commit/b4128693ed61aa0c32179af07677bcf1d8301dcd#diff-d704882a8a30280a9ee661296ff652924b463d1463b7f4c0527e3905c0f56726L1108
github.com/nats-io/nats-server/pull/2917
github.com/nats-io/nats-server/releases
github.com/nats-io/nats-server/security/advisories/GHSA-6h3m-36w8-hv68
Related
osv
osv
BIT-nats-2022-26652
2024-03-06 10:58:12
Arbitrary file write in nats-server
2022-03-10 22:07:30
CVE-2022-26652
2022-03-10 17:47:51
cvelist
cvelist
CVE-2022-26652
2022-03-10 03:48:44
debiancve
debiancve
CVE-2022-26652
2022-03-10 17:47:51
cve
cve
CVE-2022-26652
2022-03-10 17:47:51
prion
prion
Directory traversal
2022-03-10 17:47:00
nvd
nvd
CVE-2022-26652
2022-03-10 17:47:51
github
github
Arbitrary file write in nats-server
2022-03-10 22:07:30