Skip to content

Commit f9410be

Browse files
thatnealpatelgopherbot
thatnealpatel
authored and
gopherbot
committed
data/reports: add GO-2025-3600
 - data/reports/GO-2025-3600.yaml Fixes #3600 Change-Id: I17778f10a060e55078b2f3ce00d9eac7264176d3 Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/664536 Reviewed-by: Damien Neil <dneil@google.com> LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com> Reviewed-by: Zvonimir Pavlinovic <zpavlinovic@google.com> Auto-Submit: Neal Patel <nealpatel@google.com>
1 parent c7c8987 commit f9410be

File tree

2 files changed

+284
-0
lines changed

2 files changed

+284
-0
lines changed

‎data/osv/GO-2025-3600.json‎

Lines changed: 162 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,162 @@
1+
{
2+
"schema_version": "1.3.1",
3+
"id": "GO-2025-3600",
4+
"modified": "0001-01-01T00:00:00Z",
5+
"published": "0001-01-01T00:00:00Z",
6+
"aliases": [
7+
"CVE-2025-30215",
8+
"GHSA-fhg8-qxh5-7q3w"
9+
],
10+
"summary": "Missing ACLs on JavaScript APIs allowing privilege escalation github.com/nats-io/nats-server",
11+
"details": "Missing",
12+
"affected": [
13+
{
14+
"package": {
15+
"name": "github.com/nats-io/nats-server/v2",
16+
"ecosystem": "Go"
17+
},
18+
"ranges": [
19+
{
20+
"type": "SEMVER",
21+
"events": [
22+
{
23+
"introduced": "2.2.0"
24+
},
25+
{
26+
"fixed": "2.10.27"
27+
},
28+
{
29+
"introduced": "2.11.0"
30+
},
31+
{
32+
"fixed": "2.11.1"
33+
}
34+
]
35+
}
36+
],
37+
"ecosystem_specific": {
38+
"imports": [
39+
{
40+
"path": "github.com/nats-io/nats-server/v2/server",
41+
"symbols": [
42+
"Account.AddServiceImport",
43+
"Account.AddServiceImportWithClaim",
44+
"Account.DisableJetStream",
45+
"Account.EnableJetStream",
46+
"Account.RestoreStream",
47+
"Account.TrackServiceExport",
48+
"Account.TrackServiceExportWithSampling",
49+
"Account.UnTrackServiceExport",
50+
"CacheDirAccResolver.Reload",
51+
"CacheDirAccResolver.Start",
52+
"ConfigureOptions",
53+
"DirAccResolver.Fetch",
54+
"DirAccResolver.Reload",
55+
"DirAccResolver.Start",
56+
"DirAccResolver.Store",
57+
"DirJWTStore.Merge",
58+
"DirJWTStore.Pack",
59+
"DirJWTStore.PackWalk",
60+
"DirJWTStore.Reload",
61+
"DirJWTStore.SaveAcc",
62+
"DirJWTStore.SaveAct",
63+
"New",
64+
"NewCacheDirAccResolver",
65+
"NewDirAccResolver",
66+
"NewExpiringDirJWTStore",
67+
"NewServer",
68+
"Options.ProcessConfigFile",
69+
"ProcessConfigFile",
70+
"Run",
71+
"Server.AcceptLoop",
72+
"Server.AccountStatz",
73+
"Server.Accountz",
74+
"Server.ActivePeers",
75+
"Server.Connz",
76+
"Server.DisableJetStream",
77+
"Server.DisconnectClientByID",
78+
"Server.EnableJetStream",
79+
"Server.Gatewayz",
80+
"Server.HandleAccountStatz",
81+
"Server.HandleAccountz",
82+
"Server.HandleConnz",
83+
"Server.HandleGatewayz",
84+
"Server.HandleHealthz",
85+
"Server.HandleIPQueuesz",
86+
"Server.HandleSubsz",
87+
"Server.HandleVarz",
88+
"Server.InProcessConn",
89+
"Server.Ipqueuesz",
90+
"Server.JetStreamEnabledForDomain",
91+
"Server.JetStreamIsStreamAssigned",
92+
"Server.JetStreamIsStreamCurrent",
93+
"Server.JetStreamSnapshotMeta",
94+
"Server.JetStreamSnapshotStream",
95+
"Server.JetStreamStepdownConsumer",
96+
"Server.JetStreamStepdownStream",
97+
"Server.LameDuckShutdown",
98+
"Server.LookupAccount",
99+
"Server.LookupOrRegisterAccount",
100+
"Server.NumLoadedAccounts",
101+
"Server.NumSubscriptions",
102+
"Server.RegisterAccount",
103+
"Server.Reload",
104+
"Server.ReloadOptions",
105+
"Server.SetDefaultSystemAccount",
106+
"Server.SetSystemAccount",
107+
"Server.Shutdown",
108+
"Server.Start",
109+
"Server.StartHTTPMonitoring",
110+
"Server.StartHTTPSMonitoring",
111+
"Server.StartMonitoring",
112+
"Server.StartProfiler",
113+
"Server.StartRouting",
114+
"Server.Subsz",
115+
"Server.UpdateAccountClaims",
116+
"Server.Varz",
117+
"client.RegisterNkeyUser",
118+
"client.RegisterUser",
119+
"clusterOption.Apply",
120+
"leafNodeOption.Apply",
121+
"maxConnOption.Apply",
122+
"mqttMaxAckPendingReload.Apply",
123+
"raft.AdjustClusterSize",
124+
"raft.InstallSnapshot",
125+
"raft.PauseApply",
126+
"raft.ProposeKnownPeers",
127+
"raft.ProposeRemovePeer",
128+
"raft.ResumeApply",
129+
"raft.SendSnapshot",
130+
"raft.StepDown",
131+
"raft.UpdateKnownPeers",
132+
"routesOption.Apply"
133+
]
134+
}
135+
]
136+
}
137+
}
138+
],
139+
"references": [
140+
{
141+
"type": "ADVISORY",
142+
"url": "https://github.com/nats-io/nats-server/security/advisories/GHSA-fhg8-qxh5-7q3w"
143+
},
144+
{
145+
"type": "WEB",
146+
"url": "https://advisories.nats.io/CVE/secnote-2025-01.txt"
147+
},
148+
{
149+
"type": "FIX",
150+
"url": "https://github.com/nats-io/nats-server/commit/3e7e4645a24e829a36b4210f2d7c34dea7f7a424"
151+
}
152+
],
153+
"credits": [
154+
{
155+
"name": "Thomas Morgan"
156+
}
157+
],
158+
"database_specific": {
159+
"url": "https://pkg.go.dev/vuln/GO-2025-3600",
160+
"review_status": "REVIEWED"
161+
}
162+
}

‎data/reports/GO-2025-3600.yaml‎

Lines changed: 122 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,122 @@
1+
id: GO-2025-3600
2+
modules:
3+
- module: github.com/nats-io/nats-server/v2
4+
versions:
5+
- introduced: 2.2.0
6+
- fixed: 2.10.27
7+
- introduced: 2.11.0
8+
- fixed: 2.11.1
9+
vulnerable_at: 2.10.26
10+
packages:
11+
- package: github.com/nats-io/nats-server/v2/server
12+
symbols:
13+
- ConfigureOptions
14+
- New
15+
- NewServer
16+
- Options.ProcessConfigFile
17+
- ProcessConfigFile
18+
- Run
19+
- Server.EnableJetStream
20+
- Server.Reload
21+
- Server.ReloadOptions
22+
- Server.Start
23+
derived_symbols:
24+
- Account.AddServiceImport
25+
- Account.AddServiceImportWithClaim
26+
- Account.DisableJetStream
27+
- Account.EnableJetStream
28+
- Account.RestoreStream
29+
- Account.TrackServiceExport
30+
- Account.TrackServiceExportWithSampling
31+
- Account.UnTrackServiceExport
32+
- CacheDirAccResolver.Reload
33+
- CacheDirAccResolver.Start
34+
- DirAccResolver.Fetch
35+
- DirAccResolver.Reload
36+
- DirAccResolver.Start
37+
- DirAccResolver.Store
38+
- DirJWTStore.Merge
39+
- DirJWTStore.Pack
40+
- DirJWTStore.PackWalk
41+
- DirJWTStore.Reload
42+
- DirJWTStore.SaveAcc
43+
- DirJWTStore.SaveAct
44+
- NewCacheDirAccResolver
45+
- NewDirAccResolver
46+
- NewExpiringDirJWTStore
47+
- Server.AcceptLoop
48+
- Server.AccountStatz
49+
- Server.Accountz
50+
- Server.ActivePeers
51+
- Server.Connz
52+
- Server.DisableJetStream
53+
- Server.DisconnectClientByID
54+
- Server.Gatewayz
55+
- Server.HandleAccountStatz
56+
- Server.HandleAccountz
57+
- Server.HandleConnz
58+
- Server.HandleGatewayz
59+
- Server.HandleHealthz
60+
- Server.HandleIPQueuesz
61+
- Server.HandleSubsz
62+
- Server.HandleVarz
63+
- Server.InProcessConn
64+
- Server.Ipqueuesz
65+
- Server.JetStreamEnabledForDomain
66+
- Server.JetStreamIsStreamAssigned
67+
- Server.JetStreamIsStreamCurrent
68+
- Server.JetStreamSnapshotMeta
69+
- Server.JetStreamSnapshotStream
70+
- Server.JetStreamStepdownConsumer
71+
- Server.JetStreamStepdownStream
72+
- Server.LameDuckShutdown
73+
- Server.LookupAccount
74+
- Server.LookupOrRegisterAccount
75+
- Server.NumLoadedAccounts
76+
- Server.NumSubscriptions
77+
- Server.RegisterAccount
78+
- Server.SetDefaultSystemAccount
79+
- Server.SetSystemAccount
80+
- Server.Shutdown
81+
- Server.StartHTTPMonitoring
82+
- Server.StartHTTPSMonitoring
83+
- Server.StartMonitoring
84+
- Server.StartProfiler
85+
- Server.StartRouting
86+
- Server.Subsz
87+
- Server.UpdateAccountClaims
88+
- Server.Varz
89+
- client.RegisterNkeyUser
90+
- client.RegisterUser
91+
- clusterOption.Apply
92+
- leafNodeOption.Apply
93+
- maxConnOption.Apply
94+
- mqttMaxAckPendingReload.Apply
95+
- raft.AdjustClusterSize
96+
- raft.InstallSnapshot
97+
- raft.PauseApply
98+
- raft.ProposeKnownPeers
99+
- raft.ProposeRemovePeer
100+
- raft.ResumeApply
101+
- raft.SendSnapshot
102+
- raft.StepDown
103+
- raft.UpdateKnownPeers
104+
- routesOption.Apply
105+
summary: |-
106+
Missing ACLs on JavaScript APIs allowing privilege escalation
107+
github.com/nats-io/nats-server
108+
description: Missing
109+
cves:
110+
- CVE-2025-30215
111+
ghsas:
112+
- GHSA-fhg8-qxh5-7q3w
113+
credits:
114+
- Thomas Morgan
115+
references:
116+
- advisory: https://github.com/nats-io/nats-server/security/advisories/GHSA-fhg8-qxh5-7q3w
117+
- web: https://advisories.nats.io/CVE/secnote-2025-01.txt
118+
- fix: https://github.com/nats-io/nats-server/commit/3e7e4645a24e829a36b4210f2d7c34dea7f7a424
119+
source:
120+
id: go-security-team
121+
created: 2025-04-10T12:58:14.561598-04:00
122+
review_status: REVIEWED

0 commit comments

Comments
 (0)