github.com/nats-io/nats-streaming-server

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 8.8

CVE-2022-24450

Incorrect Authorization in NATS nats-server

NATS nats-server before 2.7.2 has Incorrect Access Control. Any authenticated user can obtain the privileges of the System account by misusing the "dynamically provisioned sandbox accounts" feature.

github.com/nats-io/nats-server/v2 github.com/nats-io/nats-server github.com/nats-io/nats-streaming-server Go

Feb 8, 2022