VDB

CVE-2022-26652

CVE-2022-26652 PUBLISHED

NATS nats-server before 2.7.4 allows Directory Traversal (with write access) via an element in a ZIP archive for JetStream streams. nats-streaming-server before 0.24.3 is also affected.

EPSS 2.34% · 82.0th percentile

Risk Scores

EPSS Score
2.34%
82.0th percentile

Affected Products

VendorProductVersions
Bitnaminats2.2.0
Bitnaminats2.2.0

Timeline

  • Mar 10, 2022 CVE Published
  • Mar 10, 2022 EPSS Score
  • Mar 11, 2022 CVE Updated
  • Apr 30, 2022 EPSS Score
  • Jun 21, 2022 EPSS Score
  • Oct 3, 2022 EPSS Score
  • Nov 23, 2022 EPSS Score
  • Jan 14, 2023 EPSS Score
  • Mar 6, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score
  • Jun 17, 2023 EPSS Score
  • Aug 7, 2023 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›