2 matches found
CVE-2023-26256
An unauthenticated path traversal vulnerability affects the "STAGIL Navigation for Jira - Menu & Themes" plugin before 2.0.52 for Jira. By modifying the fileName parameter to the snjFooterNavigationConfig endpoint, it is possible to traverse and read the file system...
7.5CVSS7.1AI score0.11615EPSS
SaveExploits7References2
CVE-2023-26256: Improper Limitation of a Pathname to a Restricted Directory
An unauthenticated path traversal vulnerability affects the "STAGIL Navigation for Jira - Menu & Themes" plugin before 2.0.52 for Jira. By modifying the fileName parameter to the snjFooterNavigationConfig endpoint, it is possible to traverse and read the file system...
7.5CVSS5.8AI score0.11615EPSS
SaveExploits7References3
20