Filtered by vendor Nats Subscriptions
Filtered by product Nats Streaming Server Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2022-24450 1 Nats 2 Nats Server, Nats Streaming Server 2023-08-08 8.8 High
NATS nats-server before 2.7.2 has Incorrect Access Control. Any authenticated user can obtain the privileges of the System account by misusing the "dynamically provisioned sandbox accounts" feature.
CVE-2022-26652 1 Nats 2 Nats Server, Nats Streaming Server 2022-03-18 6.5 Medium
NATS nats-server before 2.7.4 allows Directory Traversal (with write access) via an element in a ZIP archive for JetStream streams. nats-streaming-server before 0.24.3 is also affected.