Jira Server/Data Center STAGIL Navigation plugin Path Traversal CVE-2023-26255

Binary data jiraCVE-2023-26255.nbin...

Exploit for Path Traversal in Stagil Stagil_Navigation

CVE-2023-26255 CVE-2023-26256 POC FOFA: body="JI...

Exploit for Path Traversal in Stagil Stagil_Navigation

POC script for the vulnerability exposure in the Jira plugin S...

Exploit for Path Traversal in Stagil Stagil_Navigation

CVE-2023-26255 CVE-2023-26256 POC...

CVE-2023-26255

creationtimestamp| type| source ---|---|--- 2023-02-28 18:27:43+00:00| seen| https://t.me/cibsecurity/59105 2023-07-18 14:26:22+00:00| seen| https://t.me/ctinow/124485 2023-08-26 14:23:26+00:00| published-proof-of-concept| Telegram/tubAIbdOBKn5G88gV0Q9WUtcwQ8bfNx5NVSHlH3kNzLaMM 2023-08-27...

CVE-2023-26255

CVE-2023-26255 affects the STAGIL Navigation for Jira Menu & Themes plugin for Jira (before 2.0.52). Multiple sources confirm an unauthenticated path traversal/local file inclusion via the snjCustomDesignConfig endpoint when the fileName parameter is modified, enabling an attacker to read server ...

CVE-2023-26255

An unauthenticated path traversal vulnerability affects the "STAGIL Navigation for Jira - Menu & Themes" plugin before 2.0.52 for Jira. By modifying the fileName parameter to the snjCustomDesignConfig endpoint, it is possible to traverse and read the file system...