CVE-2022-26652 PUBLISHED

NATS nats-server before 2.7.4 allows Directory Traversal (with write access) via an element in a ZIP archive for JetStream streams. nats-streaming-server before 0.24.3 is also affected.

EPSS 0.68% · 71.5th percentile

Risk Scores

EPSS Score
0.68%
71.5th percentile

Affected Products

VendorProductVersions
Bitnaminats2.2.0
Bitnaminats2.2.0

Timeline

References

Open in Interactive Console →