CVE-2022-26652

Publication date

2022-03-10 03:48:44

Family

mitre

State

PUBLISHED

Description

NATS nats-server before 2.7.4 allows Directory Traversal (with write access) via an element in a ZIP archive for JetStream streams. nats-streaming-server before 0.24.3 is also affected.