Lucene search

K
cvelistMitreCVELIST:CVE-2023-26255
HistoryFeb 28, 2023 - 12:00 a.m.

CVE-2023-26255

2023-02-2800:00:00
mitre
www.cve.org
4
cve-2023-26255
unauthenticated
path traversal
stagil navigation
jira
plugin

EPSS

0.277

Percentile

96.9%

An unauthenticated path traversal vulnerability affects the “STAGIL Navigation for Jira - Menu & Themes” plugin before 2.0.52 for Jira. By modifying the fileName parameter to the snjCustomDesignConfig endpoint, it is possible to traverse and read the file system.

EPSS

0.277

Percentile

96.9%

Related for CVELIST:CVE-2023-26255