Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-26256
HistoryFeb 28, 2023 - 4:15 p.m.

Path traversal

2023-02-2816:15:00
PRIOn knowledge base
www.prio-n.com
4
vulnerability
unauthenticated access
path traversal
stagil navigation
jira
plugin
file system.

0.021 Low

EPSS

Percentile

89.2%

An unauthenticated path traversal vulnerability affects the “STAGIL Navigation for Jira - Menu & Themes” plugin before 2.0.52 for Jira. By modifying the fileName parameter to the snjFooterNavigationConfig endpoint, it is possible to traverse and read the file system.

CPENameOperatorVersion
stagil_navigationlt2.0.52

0.021 Low

EPSS

Percentile

89.2%

Related for PRION:CVE-2023-26256