critical9.8
CVE-2022-28357
NATS nats-server allows directory traversal via unintended path to a management action
Impact
NATS nats-server 2.2.0 through 2.7.4 allows directory traversal because of an unintended path to a management action from a management account.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| go | github.com/nats-io/nats-server | >= 2.2.0, < 2.7.4 | 2.7.4 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Linuxfoundation | Nats-Server | from 2.2.0 through 2.7.4 |