Linuxfoundation

Nats-server

4 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2023-47090

  • EPSS 0.26%
  • Published 30.10.2023 17:15:52
  • Last modified 21.11.2024 08:29:44

NATS nats-server before 2.9.23 and 2.10.x before 2.10.2 has an authentication bypass. An implicit $G user in an authorization block can sometimes be used for unauthenticated access, even when the intention of the configuration was for each user to ha...

9.8

CVE-2022-28357

  • EPSS 0.23%
  • Published 19.09.2023 02:15:54
  • Last modified 21.11.2024 06:57:12

NATS nats-server 2.2.0 through 2.7.4 allows directory traversal because of an unintended path to a management action from a management account.

7.5

CVE-2020-26521

  • EPSS 0.68%
  • Published 06.11.2020 08:15:13
  • Last modified 21.11.2024 05:19:59

The JWT library in NATS nats-server before 2.1.9 allows a denial of service (a nil dereference in Go code).

9.8

CVE-2020-26892

  • EPSS 0.56%
  • Published 06.11.2020 08:15:13
  • Last modified 21.11.2024 05:20:25

The JWT library in NATS nats-server before 2.1.9 has Incorrect Access Control because of how expired credentials are handled.