Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
NATS.io NATS Server before 2.8.2 and Streaming Server before 0.24.6 could allow a remote attacker to bypass security restrictions, caused by the failure to enforce negative user permissions in one scenario. By using a queue subscription on the wildcard, an attacker could exploit this vulnerability to allow denied subjects.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
NATS Server 安全漏洞
Vulnerability Description
NATS Server是一款开源消息系统。该系统主要用于云原生应用、物联网消息传递和微服务架构等。 NATS.io NATS Server 2.8.2之前版本和Streaming Server 0.24.6之前版本存在安全漏洞，该漏洞源于未能强制执行负面用户权限，从而允许远程攻击者绕过安全限制。
CVSS Information
N/A
Vulnerability Type
N/A