CVE-2023-26255
HIGH EXPLOITED NUCLEISTAGIL Navigation for Jira <2.0.52 - Path Traversal
Title source: llmExploitation Summary
CVE-2023-26255 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 3 public exploits from researchers including Nian-Stars, tucommenceapousser. A Nuclei detection template is also available.
AI-analyzed exploit summary The repository contains a functional Python script that exploits CVE-2023-26255/6, an arbitrary file read vulnerability in Jira's STAGIL Navigation plugin. The script sends crafted HTTP requests to read sensitive files (e.g., /etc/passwd) via path traversal in the 'fileName' parameter.
Description
An unauthenticated path traversal vulnerability affects the "STAGIL Navigation for Jira - Menu & Themes" plugin before 2.0.52 for Jira. By modifying the fileName parameter to the snjCustomDesignConfig endpoint, it is possible to traverse and read the file system.
Exploits (3)
The repository contains a functional Python script that exploits CVE-2023-26255/6, an arbitrary file read vulnerability in Jira's STAGIL Navigation plugin. The script sends crafted HTTP requests to read sensitive files (e.g., /etc/passwd) via path traversal in the 'fileName' parameter.
The repository contains no actual exploit code for CVE-2023-26255, only Python library files (certifi, charset_normalizer, cowsay, questionary) unrelated to the vulnerability. No technical details or PoC are provided.
The repository contains a functional exploit PoC for CVE-2023-26255 and CVE-2023-26256, targeting the STAGIL Navigation for Jira plugin. The exploit leverages path traversal vulnerabilities to read arbitrary files (e.g., /etc/passwd) without authentication.
Nuclei Templates (1)
title:Jira || http.title:jira
title=jira
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N