GO-2023-2066

vendorUSosv

NATS nats-server allows directory traversal via unintended path to a management action in github.com/nats-io/nats-server

view advisory published 2024-08-21Licence: per source

NATS nats-server allows directory traversal via unintended path to a management action in github.com/nats-io/nats-server

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2022-28357UScritical9.8—
NATS nats-server 2.2.0 through 2.7.4 allows directory traversal because of an unintended path to a management action from a management account.
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan