debian · CVE-2022-26652

Quick triage

View at Official debian advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2022-26652 unimportant priority: Debian including 1 source packages (nats-server), 4 status rows across 4 suites (bookworm, forky, sid, trixie): resolved 4.

Description:

NATS nats-server before 2.7.4 allows Directory Traversal (with write access) via an element in a ZIP archive for JetStream streams. nats-streaming-server before 0.24.3 is also affected.