CVE-2023-26255 (published 2023-02-28T00:00:00)
An unauthenticated path traversal vulnerability affects the "STAGIL Navigation for Jira - Menu & Themes" plugin before 2.0.52 for Jira. By modifying the fileName parameter to the snjCustomDesignConfig endpoint, it is possible to traverse and read the file system.
Affected products: Vendor: n/a
Product: n/a
Versions: n/a