Nats

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Nats records in CISA KEV

No Nats vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Nats Streaming Server · all components

TI-2022-08320 CVE-2022-24450 · GHSA-g6w6-r76c-28j7

MEDIUM 41

NATS nats-server before 2.7.2 has Incorrect Access Control.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0133 Published 2022-02-08 Partial fix · 2.7.2, 0.24.1 CWE-862

TI-2022-09926 CVE-2022-26652 · GHSA-6h3m-36w8-hv68

LOW 33

NATS nats-server before 2.7.4 allows Directory Traversal (with write access) via an element in a ZIP archive for JetStream streams.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02342 Published 2022-03-10 Fixed in 2.7.4, 0.24.3 CWE-22