high7.5
CVE-2023-26255
An unauthenticated path traversal vulnerability affects the "STAGIL Navigation for Jira - Menu & Themes" plugin before 2.0.52 for Jira.
Impact
An unauthenticated path traversal vulnerability affects the "STAGIL Navigation for Jira - Menu & Themes" plugin before 2.0.52 for Jira. By modifying the fileName parameter to the snjCustomDesignConfig endpoint, it is possible to traverse and read the file system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Stagil | Stagil Navigation | before 2.0.52 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/1nters3ct/CVEs/blob/main/CVE-2023-26255.md
- https://marketplace.atlassian.com/apps/1216090/stagil-navigation-for-jira-menus-themes?tab=overview&hosting=cloud
- https://github.com/1nters3ct/CVEs/blob/main/CVE-2023-26255.md
- https://marketplace.atlassian.com/apps/1216090/stagil-navigation-for-jira-menus-themes?tab=overview&hosting=cloud