~ / search / GHSA-vpjc-4jcv-jc29

GHSA-vpjc-4jcv-jc29

NATS nats-server allows directory traversal via unintended path to a management action

Source: GitHub Advisory Database (reviewed) Critical CVE-2022-28357

Packages

EcosystemPackageAffectedFixed in
Go github.com/nats-io/nats-server >= 2.2.0, < 2.7.4 2.7.4

Details

As written in the advisory (Markdown source, shown as plain text).

NATS nats-server 2.2.0 through 2.7.4 allows directory traversal because of an unintended path to a management action from a management account.

References

External links from the advisory. They lead to third-party sites.