Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2022-24450
8.8
HIGHCVSS v3
Published
February 8, 2022
CVSS v2
9 HIGH
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
NATS nats-server before 2.7.2 has Incorrect Access Control. Any authenticated user can obtain the privileges of the System account by misusing the "dynamically provisioned sandbox accounts" feature.
nats-io/nats-server
GitHubHigh-Performance server for NATS.io, the cloud and edge native messaging system.
GitHubHigh-Performance server for NATS.io, the cloud and edge native messaging system.= *, >= 2.0.0, < 2.7.2NVD