CVE-2023-26255
90Vexday Risk Score
Patch now. It exploitation observed by VulnCheck and has a working public exploit.
ssvc Actcvss 7.5epss 47%
from disclosure to weapon183 days
Published on NVDFeb 28
1st PoC+183d
VulnCheck+140d
exploitation probability
47%top 1% of all CVEs
observed exploitation
yesVulnCheck
2 public exploit(s)
An unauthenticated path traversal vulnerability affects the "STAGIL Navigation for Jira - Menu & Themes" plugin before 2.0.52 for Jira. By modifying the fileName parameter to the snjCustomDesignConfig endpoint, it is possible to traverse and read the file system.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
n/a · n/apublic PoCs found — 2
vulncheckvulncheck.com/xdb/21f91c9a90b3unverifiedvulncheckvulncheck.com/xdb/579ed077e4deunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.