Nats Streaming Server vulnerabilities

2 vulnerabilities

Known vulnerabilities in Nats Streaming Server, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.5CVE-2022-26652github.com/nats-ionats-server+4
EPSS score
2.34%
NATS nats-server before 2.7.4 allows Directory Traversal (with write access) via an element in a ZIP archive for JetStream streams. nats-streaming-server before 0.24.3 is also affected.9CVE-2022-24450github.com/nats-ionats-server+5
EPSS score
1.33%
NATS nats-server before 2.7.2 has Incorrect Access Control. Any authenticated user can obtain the privileges of the System account by misusing the "dynamically provisioned sandbox accounts" feature.