1nters3ct/CVEs

1nters3ct/CVEs

Releases0

Stars3

POC of the discovered CVE

Log in to subscribe

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2023-26255 ↗	Feb 28, 2023Tuesday, 28 February 2023, 16:15	7.5 HIGH	—
An unauthenticated path traversal vulnerability affects the "STAGIL Navigation for Jira - Menu & Themes" plugin before 2.0.52 for Jira. By modifying the fileName parameter to the snjCustomDesignConfig endpoint, it is possible to traverse and read the file system.
CVE-2023-26256 ↗	Feb 28, 2023Tuesday, 28 February 2023, 16:15	7.5 HIGH	—
An unauthenticated path traversal vulnerability affects the "STAGIL Navigation for Jira - Menu & Themes" plugin before 2.0.52 for Jira. By modifying the fileName parameter to the snjFooterNavigationConfig endpoint, it is possible to traverse and read the file system.