VDB

CVE-2022-26652

CVE-2022-26652 PUBLISHED

NATS nats-server before 2.7.4 allows Directory Traversal (with write access) via an element in a ZIP archive for JetStream streams. nats-streaming-server before 0.24.3 is also affected.

EPSS 0.68% · 72.1th percentile

Risk Scores

EPSS Score
0.68%
72.1th percentile

Affected Products

VendorProductVersions
Bitnaminats2.2.0
Bitnaminats2.2.0

Timeline

  • Mar 10, 2022 CVE Published
  • Mar 10, 2022 EPSS Score
  • Mar 11, 2022 CVE Updated
  • Apr 30, 2022 EPSS Score
  • Jun 21, 2022 EPSS Score
  • Oct 3, 2022 EPSS Score
  • Nov 23, 2022 EPSS Score
  • Jan 13, 2023 EPSS Score
  • Mar 6, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score
  • Jun 17, 2023 EPSS Score
  • Aug 7, 2023 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›