CVE-2022-28357

Description

NATS nats-server allows directory traversal via unintended path to a management action in github.com/nats-io/nats-server

Affected packages (3)

• Go/github.com/nats-io/nats-server>= 2.2.0, < 2.7.4
• Go/github.com/nats-io/nats-serverfrom 0
• Go/github.com/nats-io/nats-server/v2>= 2.2.0, < 2.7.4

CVSS scores

References (5)

• ADVISORYhttps://github.com/advisories/GHSA-vpjc-4jcv-jc29
• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2022-28357
• PATCHhttps://github.com/nats-io/nats-server
• WEBhttps://advisories.nats.io/CVE/CVE-2022-28357.txt
• WEBhttps://github.com/nats-io/nats-server/releases/tag/v2.7.4