An unauthenticated path traversal... CVE-2023-26256

- AV AC AU C I A
发布: 2023-02-28
修订: 2023-03-07

An unauthenticated path traversal vulnerability affects the "STAGIL Navigation for Jira - Menu & Themes" plugin before 2.0.52 for Jira. By modifying the fileName parameter to the snjFooterNavigationConfig endpoint, it is possible to traverse and read the file system.

0%
暂无可用Exp或PoC
当前有1条受影响产品信息