Filtered by vendor Nats Subscriptions
Filtered by product Nats Streaming Server Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2022-26652 1 Nats 2 Nats Server, Nats Streaming Server 2024-11-21 6.5 Medium
NATS nats-server before 2.7.4 allows Directory Traversal (with write access) via an element in a ZIP archive for JetStream streams. nats-streaming-server before 0.24.3 is also affected.
CVE-2022-24450 2 Nats, Redhat 3 Nats Server, Nats Streaming Server, Acm 2024-11-21 8.8 High
NATS nats-server before 2.7.2 has Incorrect Access Control. Any authenticated user can obtain the privileges of the System account by misusing the "dynamically provisioned sandbox accounts" feature.