CVE-2022-28357

NATS nats-server 2.2.0 through 2.7.4 allows directory traversal because of an unintended path to a management action from a management account.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2023-09-19

Last modified

2024-09-25

Weaknesses

CWE-22

Affected products

• Nats-server (Linuxfoundation)

References

• https://advisories.nats.io/CVE/CVE-2022-28357.txt
• https://github.com/nats-io/nats-server/releases