CVE-2022-28357

Go/github.com/nats-io/nats-server CVE-2022-28357: critical 9.8, EPSS 1.17%

NATS nats-server allows directory traversal via unintended path to a management action

Action: Upgrade github.com/nats-io/nats-server to 2.7.4 or later.

go get github.com/nats-io/nats-server@v2.7.4

Affected

Fixed versions

Sources

• osv: GHSA-vpjc-4jcv-jc29
• https://nvd.nist.gov/vuln/detail/CVE-2022-28357
• https://advisories.nats.io/CVE/CVE-2022-28357.txt
• https://github.com/nats-io/nats-server
• https://github.com/nats-io/nats-server/releases/tag/v2.7.4

CVE-2022-28357 · published 2023-09-19T03:30:34Z · modified 2024-08-21T14:56:47.926378Z · JSON

Go/github.com/nats-io/nats-server CVE-2022-28357: unknown, EPSS 1.17%

NATS nats-server allows directory traversal via unintended path to a management action in github.com/nats-io/nats-server

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2023-2066
• https://github.com/advisories/GHSA-vpjc-4jcv-jc29
• https://nvd.nist.gov/vuln/detail/CVE-2022-28357
• https://advisories.nats.io/CVE/CVE-2022-28357.txt
• https://github.com/nats-io/nats-server/releases/tag/v2.7.4

CVE-2022-28357 · published 2024-08-21T14:30:18Z · modified 2026-03-03T04:54:10.121726Z · JSON

Go/github.com/nats-io/nats-server/v2 CVE-2022-28357: unknown, EPSS 1.17%

NATS nats-server allows directory traversal via unintended path to a management action in github.com/nats-io/nats-server

Action: Upgrade github.com/nats-io/nats-server/v2 to 2.7.4 or later.

go get github.com/nats-io/nats-server/v2@v2.7.4

Affected

Fixed versions

Sources

• osv: GO-2023-2066#Go/github.com/nats-io/nats-server/v2
• https://github.com/advisories/GHSA-vpjc-4jcv-jc29
• https://nvd.nist.gov/vuln/detail/CVE-2022-28357
• https://advisories.nats.io/CVE/CVE-2022-28357.txt
• https://github.com/nats-io/nats-server/releases/tag/v2.7.4

CVE-2022-28357 · published 2024-08-21T14:30:18Z · modified 2026-03-03T04:54:10.121726Z · JSON