CVE-2023-26256
HIGH EXPLOITED NUCLEISTAGIL Navigation for Jira <2.0.52 - Path Traversal
Title source: llmExploitation Summary
CVE-2023-26256 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 6 public exploits from researchers including 0x7eTeam, jcad123, qs119. A Nuclei detection template is also available.
AI-analyzed exploit summary The repository contains a functional exploit PoC for CVE-2023-26256, which targets an unauthenticated file download vulnerability in the STAGIL Navigation for Jira plugin. The script sends crafted HTTP requests to retrieve sensitive files (e.g., /etc/passwd) via path traversal.
Description
An unauthenticated path traversal vulnerability affects the "STAGIL Navigation for Jira - Menu & Themes" plugin before 2.0.52 for Jira. By modifying the fileName parameter to the snjFooterNavigationConfig endpoint, it is possible to traverse and read the file system.
Exploits (6)
The repository contains a functional exploit PoC for CVE-2023-26256, which targets an unauthenticated file download vulnerability in the STAGIL Navigation for Jira plugin. The script sends crafted HTTP requests to retrieve sensitive files (e.g., /etc/passwd) via path traversal.
This repository contains a functional exploit PoC for CVE-2023-26256, targeting an unauthenticated file download vulnerability in the STAGIL Navigation for Jira plugin. The script sends crafted HTTP requests to retrieve sensitive files (e.g., /etc/passwd) via path traversal.
The repository contains a functional exploit PoC for CVE-2023-26256, which targets a path traversal vulnerability in the STAGIL Navigation for Jira plugin. The script attempts to read arbitrary files (e.g., /etc/passwd) via unauthenticated HTTP requests to vulnerable endpoints.
The repository contains a functional exploit PoC for CVE-2023-26256, targeting a path traversal vulnerability in the STAGIL Navigation for Jira plugin. The script attempts to read arbitrary files (e.g., /etc/passwd) via crafted URLs, confirming vulnerability if the file content is returned.
The repository contains detailed technical writeups for CVE-2023-26255 and CVE-2023-26256, both directory traversal vulnerabilities in the 'Stagil navigation for Jira' plugin. The writeups include proof-of-concept HTTP requests, affected parameters, and mitigation steps.
The repository contains a functional exploit PoC for CVE-2023-26256, which targets a path traversal vulnerability in the STAGIL Navigation for Jira plugin. The script attempts to read arbitrary files (e.g., /etc/passwd) via crafted HTTP requests to vulnerable endpoints.
Nuclei Templates (1)
title:Jira || http.title:jira
title=jira
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N